Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A barebones theme for Jekyll, which doesn't need any dependencies except jekyll-redirect-from
, if you want to redirect pages. It is optimized for fast build speeds as well.
Its purpose is to be a minimalistic, single-author theme. Because there is no menu, pages can be manually linked in the body of index.md
.
It also changes as little as possible from the default browser settings to improve legibility.
If this theme feels to bloated to you, you can try “Nixer”, the ultra-minimalistic version of “Nix”.
The default browser link colors don't look great, if they're inverted in dark mode, just like white is inverted to black for the background:
Therefore, they're set to somewhat lighter versions of the default colors:
The favicon is currently icon.webp
for the light mode, and there's also a dark variant icon-dark.webp
.
“Nix” is the grammatically incorrect form of the German “nichts”, which in English means “nothing”. It's colloquially used to stress the nothingness.
Or, if you will, it could be UNIX without the “U”, because of the theme's somewhat archaic properties.
Installation from Gem is recommended, but using a remote theme is also possible, even though it will increase build time a little, depending on your internet connection, because the theme will be downloaded during each build. Gems are installed locally.
GitHub pages gem users need to use the remote theme method.
Add this line to your Jekyll site's Gemfile
:
gem "jekyll-theme-nix"
And add this line to your Jekyll site's _config.yml
:
theme: jekyll-theme-nix
Make sure that this is the only theme:
in _config.yml
, and that there are no other remote-theme:
. Afterwards run bundle install
, and bundle update
to update it, if there's a new version.
bundle install
Add this line to your Jekyll site's Gemfile
:
gem "jekyll-remote-theme"
And add this line to your Jekyll site's _config.yml
:
remote_theme: michaelnordmeyer/jekyll-theme-nix
Make sure that this is the only remote_theme:
in _config.yml
, and that there are no other theme:
.
Finally, add jekyll-remote-theme
to your plugin section in _config.yml
as well.
Both are included in the theme and don't need dependencies to jekyll-feed
and jekyll-sitemap
plugins. For a standard Jekyll installation, they work out-of-the-box if both files are copied to the Jekyll directory.
If hosted with the Github pages plugin, those plugins are already included and will automatically be used instead. To overwrite this, both files have to be copied manually from the theme's repository root to the site's repository root.
Because feeds are generated once, they can only support one icon, which why the light variant was chosen.
FAQs
Unknown package
We found that jekyll-theme-nix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.