
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
gitbook-plugin-theme-faq
Advanced tools
Theme for using GitBook to publish an FAQ or Knowledge Base. This theme works perfectly with search plugins (as the default one or algolia).
This theme requires GitBook version 3 or later.
Add the theme to your book's configuration (book.json):
{
"plugins": [
"theme-faq",
"-fontsettings",
"-sharing"
]
}
NOTE theme-faq is not compatible with plugins that modify the toolbar (since there is no toolbar). Embedded search will not work as a result. This includes the default plugins fontsettings and sharing that need to be disabled explicitly (add a minus flag "-" before each plugin parameter).
Suggestions for other articles can be shown at the bottom of an article.
Relationships are specified in the YAML frontmatter of a page:
---
related:
- some/other/page.md
- another_related_article.md
---
Content of my article!
Extend the theme by creating a file _layouts/website/page.html in your book with:
{% extends template.self %}
{% block faq_header_brand %}
<img src="https://mywebsite.com/logo.png" height="30" />
{% endblock %}
Extend the theme by creating a file _layouts/website/page.html in your book with:
{% extends template.self %}
{% block faq_menu %}
<ul class="nav navbar-nav navbar-right">
<li><a href="#">Contact us</a></li>
<li><a href="#">Return to SuperWebsite</a></li>
</ul>
{% endblock %}
The content of your README is used as a short description for the home page of your FAQ.
If you wish use a specific file for this description instead of your project's README, you can configure your book.json to do so:
{
"structure": {
"readme": "home-page-description.md"
}
}
FAQs
Theme for using GitBook as a FAQ or Knowledge base
The npm package gitbook-plugin-theme-faq receives a total of 8 weekly downloads. As such, gitbook-plugin-theme-faq popularity was classified as not popular.
We found that gitbook-plugin-theme-faq demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.