
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
jekyll-dewey-decimal
Advanced tools
📖 A content-first, minimal personal weblog and portfolio.
Add this line to your Jekyll site's Gemfile
:
gem "jekyll-dewey-decimal"
And add this line to your Jekyll site's _config.yml
:
theme: jekyll-simple-blue
And then execute:
$ bundle
Or install it yourself as:
$ gem install jekyll-dewey-decimal
Using dewey as a theme means you can take advantage of the file overriding method. This allows you to overwrite any file in this theme with your own custom file, by matching the file name and path. The most common example of this would be if you want to add your own styles or change the core style settings.
To add your own styles copy the styles.css
into your own project with the same file path (assets/styles.css
). From there you can add your own styles, and modify or even remove existing ones.
There are 3 layouts; page
, post
, and home
(home acts as the front page blog).
To modify set parameters, you need to modify the _config.yml
title
and url
.
Additionally, you need to add the following parameters to edit the author name and email. You should also add your github profile.
author:
name: Your name
email: Your email
github: Your github profile url
To add your favicon, and to add a custom profile photo, simply copy them into the root folder with the names favicon.ico
, and profile.png
.
The theme is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that jekyll-dewey-decimal demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.