
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
github-repo-element
Advanced tools
A custom HTML element for displaying GitHub repositories.
<github-repo src="OWNER/REPO"></github-repo>
src
attribute and watch
the content magically update!This package is available in two distributions. The bundled version includes Skate.js, while the stand-alone assumes you will include that yourself. Note you only need one of the version.
To install the <github-repo>
element, include the script(s) on your page:
<!-- If you downloaded the bundled version, just include it -->
<script src="/path/to/github-element-bundled.js"></script>
<!-- OR -->
<!-- If you downloaded the stand-alone version, also include Skate.js -->
<script src="/path/to/skate.min.js"></script>
<script src="/path/to/github-element.js"></script>
You can require this package via bower, if that's your thing.
bower install github-repo-element
Similar to installing manually, either include the bundled or standalone version.
Once you have installed the <github-repo>
element, it works just like any other HTML elements on
your page. You can add them, manipulate them with jquery, or anything!
To set which repository the element looks at, just the src
attribute. Use the pattern of
OWNER/REPO
.
<github-repo src="stevenschobert/github-repo-element"></github-repo>
To style the <github-repo>
's contents, use the following CSS selectors.
/* Repository title */
github-repo .ghrepo-title {
}
/* Repository description */
github-repo .ghrepo-description {
}
/* Repository stars and forks */
github-repo .ghrepo-meta {
}
Please read over GitHub's awesome guide on contributing if you'd like to lend a hand!
FAQs
<github-repo> ===================
The npm package github-repo-element receives a total of 0 weekly downloads. As such, github-repo-element popularity was classified as not popular.
We found that github-repo-element demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.