Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
nonebot-plugin-gshisbanner
Advanced tools
本插件用于在机器人上查询原神历史卡池信息(当前仅适用于qq)
1.0.0版本开始同时支持了onebot v11协议和red协议,欢迎尝鲜
nb plugin install nonebot-plugin-gshisbanner
pip install nonebot-plugin-gshisbanner
打开 nonebot2 项目根目录下的 pyproject.toml
文件, 在 [tool.nonebot]
部分追加写入
plugins = ["nonebot_plugin_gshisbanner"]
gshisbanner_forward_length: int
# 单次合并转发消息长度(int),默认为10
# 仅为角色/武器卡池转发内容长度,不包括版本卡池
# 越大单次转发内容更多,合并转发的次数更少,越小单单次转发内容更少,但合并转发的次数更多
# 不要设置为>99或者<0的数字或者任意字符串
gshisbanner_json_url: str
# 历史卡池json列表下载位置
# 可选值
·· 1."banners.52v6.com/data"
#默认,推荐
·· 2."genshin-gacha-banners.vercel.app/data"
#vercel代理,国内可能无法直连
·· 3."genshin-gacha-banners.52v6.com/data"
#cloudfare代理,可能会被墙
·· 4."mirror.ghproxy.com/https://raw.githubusercontent.com/KeyPJ/FetchData/main/data/gacha"
##ghproxy代理的raw文件,大多数情况可用,不过不稳定
##前面的"ghproxy.com/"可以不写(如果你是国外机),或者换成你自建的github加速服务均可(需要支持https)
·· 5."jsd.cdn.zzko.cn/gh/KeyPJ/FetchData@main/data/gacha"
##jsdelivr代理的文件,大多数情况可用,推荐
send_type: Literal["forward", "pic"]
# 结果发送方式
forward: 使用合并转发的方式发送
pic: 使用图片发送
pic_font_path: str
# 图片发送所需要的字体
# 默认配置了MiSans字体,不满意可以自己更改
也可以自己尝试复制json文件到数据目录{bot_dir}/data/genshin_history
指令 | 权限 | 需要@ | 范围 | 说明 |
---|---|---|---|---|
[name]历史卡池(num) | ALL | 否 | ALL | name必填,为角色名字或别名;num选填,为单次合并转发次数,若无则为gshisbanner_forward_length的值 |
[version]卡池[num] | ALL | 否 | ALL | version为版本号,如1.3,2.6等,num为1-3,对应上半(中)下半,可不填,如不填则发送该版本全部卡池 |
刷新(更新)历史卡池/别名 | 管理员以上 | 否 | ALL | 刷新历史卡池或别名 |
FetchData #历史up卡池来源,感谢
FAQs
Nonebot2查询原神历史卡池小插件
We found that nonebot-plugin-gshisbanner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.