Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Engrave is a generates QR codes for the URLs of your Pelican posts and pages.
This plugin can be installed via:
pip install lm-pelican-engrave
As long as you have not explicitly added a PLUGINS
setting to your Pelican settings file, then the newly-installed plugin should be automatically detected and enabled. Otherwise, you must add engrave
to your existing PLUGINS
list. For more information, please see the How to Use Plugins documentation.
Engrave automatically generates QR codes for all articles and pages in your Pelican site. These QR codes are saved as SVG images in the engrave/
directory within the OUTPUT_PATH
defined in your Pelican settings.
The generated QR code is available in the context of the content as content.engrave_qrcode
. You can embed the QR code in your templates using the following syntax:
<img src="{{ content.engrave_qrcode }}">
Before generating new QR codes, Engrave clears the engrave/
directory to ensure that no legacy QR codes remain. This aims at maintaining security and consistency. Only by latest codes are available this way.
Engrave validates URL schemas to ensure security. By default, it only allows URLs with the https
schema. If your site uses another schema (e.g., http
or even ftp
), you should add it to the allowed schemas in your Pelican settings.
To specify allowed URL schemas for QR code generation, use the ENGRAVE_ALLOWED_SCHEMES
setting in your Pelican configuration file (pelicanconf.py
). For example:
ENGRAVE_ALLOWED_SCHEMES = ["https", "http"]
SITEURL
is set in your Pelican configuration file. This setting is crucial as it forms the basis of the URLs used for QR code generation. Be sure to synchronize ENGRAVE_ALLOWED_SCHEMES
with your SITEURL
setting to avoid any discrepancies.Contributions are welcome and much appreciated. Every little bit helps. You can contribute by improving the documentation, adding missing features, and fixing bugs. You can also help out by reviewing and commenting on existing issues.
To start contributing to this plugin, review the Contributing to Pelican documentation, beginning with the Contributing Code section.
To set up a development environment for Engrave, follow these steps.
python -m venv venv
source venv/bin/activate
python -m pip install -r requirements.txt
This project is licensed under the MIT license.
FAQs
A plugin for generating and embedding QR codes in your blogpost
We found that lm-pelican-engrave demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.