
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
yet-another-github-card
Advanced tools
Yet another github card profile for use it on your social-networks, blogs or portfolio.
Say hello to YACG 🎉: The GitHub card for your developer portfolio
You'll find all the required directories and files within the download, logically grouping common assets and providing compiled and minified variations.
Get your HTML embed code at yagc, fill in the form with your GitHub username and grab the result code.
Select your favourite package manager and follow the instructions below.
npm install yet-another-github-card --save
yarn add yet-another-github-card
composer require yet-another-github-card
The package folder structure looks like this:
yet-another-github-card/
├─ css/
├─ images/
| ├─ docs/
| ├─ favicon_io/
├─ themes/
└─ utils/
└─ js/
| Name | Description | Default value |
|---|---|---|
data-style | Set header background image. | defaultTheme |
data-user | Your GitHub username value | `` |
data-user-stars | Count all your obtained stars, includes; repositories and gists | true |
data-user-stats | Show selected stats adding/removing JSON key:value entries. Key: name. Values: 'commits', 'contributions', 'followers', 'following', 'prs' | [{"name": "commits"}, {"name": "prs}] |
At the moment, three prebuilt themes are available. Feel free to design unique cards by selecting your own colors and backgrounds!



The source includes resources for building and running locally your Github Card.
If you want to see it in action, there's a demo included, complete the following steps.
Open with your code editor the file utils/index.html
1.- Locate the custom element github-card, edit data-user attribute with your own GitHub username.
2.- Fill with your preferred settings the attributes: data-user-stars and data-user-stats.
3.- Done, save the file and run the command:
npm run compile-demo
The folder demo will be created and contain all the required files.
To run it throught the bundled web server, run the command:
npm run server-watch
Additionally, if you want execute all these steps altogether, run the command:
npm run build-demo
Have a bug or an issue with this package? Open a new issue here on GitHub!
New contributors are always welcome! Check out CONTRIBUTING.md to get involved.
Carles Loriente is the creator and maintainer of the NOCC Bootstrap theme.
Thanks to you.
Copyright (c) 2025 Carles Loriente. Code released under the MIT license.
FAQs
Yet another github card profile for use it on your social-networks, blogs or portfolio.
The npm package yet-another-github-card receives a total of 398 weekly downloads. As such, yet-another-github-card popularity was classified as not popular.
We found that yet-another-github-card demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.