
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
hexo-extract-excerpt
Advanced tools
Generate an excerpt by extracting text and images from posts based on configuration when <!--more--> is not present
<!--more-->, use the content before it as the excerpt.excerpt_length (default 400, configurable) characters from the beginning of the text.excerpt_length (i.e., the article is very short), use the entire text as the excerpt and end the processing. Otherwise, take the extracted text as the excerpt text.excerpt_img_selector, and insert the image element at the beginning of the excerpt text to create the final excerpt._config.yml. Default configuration is used if not specified.excerpt_length is set to 400 by default and can be changed by specifying excerpt_length: 500.excerpt_img_selector is set to '' by default, which means images are not extracted. It can be configured in any CSS selector format, such as excerpt_img_selector: 'img' (matching the first image element), excerpt_img_selector: 'img, pre.mermaid, figure' (matching the first image element, code block, or mermaid diagram, whichever appears first).<!--more--> 前面的内容作为摘要excerpt_length 长度的字数(默认 400,可配置)excerpt_length(文章很短时),则直接使用原文(不生成摘要),处理结束,否则截取部分作为 摘要文本excerpt_img_selector 从文章中提取第一个图片元素,并将该元素插入到 摘要文本 前面,成为最终摘要_config.yml 中,不配置时使用默认配置excerpt_length 默认为 400,可修改 excerpt_length: 500excerpt_img_selector 默认为 '',即不提取图片,可配置成任何 CSS 选择器格式,如 excerpt_img_selector: 'img'(匹配第一个图片元素), excerpt_img_selector: 'img, pre.mermaid, figure' (匹配第一个图片或代码块或 mermaid,哪个类型先出现用哪个)FAQs
Generate an excerpt by extracting text and images from posts based on configuration when <!--more--> is not present
The npm package hexo-extract-excerpt receives a total of 4 weekly downloads. As such, hexo-extract-excerpt popularity was classified as not popular.
We found that hexo-extract-excerpt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.