README badges are vulnerabilities

TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version

GitHub - Ileriayo/markdown-badges: Badges for your personal

cdk-badges - npm Package Health Analysis

Snyk The Node.js Security Storm

Top 5 Awesome Things to do in your README! - DEV Community

readme-badges - npm Package Health Analysis

Add some cool badges in your GitHub Repo – Efficient User

README badges fail to render · Issue #2805 · piskvorky/gensim · GitHub

Doc] The Readme badges Dependency Status and devDependency

Badges in the README are confusing · Issue #1079 · yegor256/takes

Readme badge

How to add some badges in your git readme (GitHub, Gitlab etc

Snyk GitHub integration - Snyk User Docs

Package readme display creates a
for every markdown newline

InsidersByte - README Badges