Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
readme-help
Advanced tools
<section id="readme-help" intro="Welcome to readme-help! What would you like help with?" prompt="I'd like help with...">
This tool will turn your README markdown file into an interactive prompt.
This is useful for providing help, and for breaking down large readmes into smaller pages.
Wrap the section of your README that you want to be your interactive help with a section that has the following id readme-help
:
# Readme
<section
id="readme-help"
intro="Welcome to our repo!"
prompt="I'd like help with..."
level="2"
>
## Setup
...
## Contributing
...
## Contact
...
</section>
Arguments are specified through attributes on the section element.
readme-help
By default the heading levels listed is 2 – any deeper headings will be prefixed with hashes. For example,
This section should appear as "# Sub section" in the prompt
If you specified the heading level as 2, higher heading levels (like this one) will not be recognised in the grouping.
This README itself is a demo! Check out this repo and run npm run help
.
Note: this section will not appear in the help, as it is outside the section.
FAQs
<section id="readme-help" intro="Welcome to readme-help! What would you like help with?" prompt="I'd like help with...">
We found that readme-help demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.