From fa03c7e4db1ab2f468a1d467b162ca62ef766a70 Mon Sep 17 00:00:00 2001 From: Alex Smith Date: Tue, 22 Sep 2026 01:20:35 -0400 Subject: [PATCH 1/6] fix(bulma-ui): serve the Socket badge from badge.socket.dev The old `socket.dev/api/badge/...` path sits behind a Cloudflare bot challenge, so GitHub's camo proxy gets a 403 interstitial back instead of an SVG and the badge renders broken. `badge.socket.dev` is the host Socket serves badges from, and camo is allowlisted for it. Keep the `/latest` segment: it is the spelling every real-world usage carries, and the one verified to return 200 image/svg+xml through camo for @allxsmith/bestax-bulma. Patch release so the README npm serves picks the fix up. --- bulma-ui/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bulma-ui/README.md b/bulma-ui/README.md index 300964ee5..e380d84fc 100644 --- a/bulma-ui/README.md +++ b/bulma-ui/README.md @@ -7,7 +7,7 @@ [![Coverage](https://img.shields.io/badge/coverage-99%25-brightgreen.svg)](https://github.com/allxsmith/bestax/blob/main/bulma-ui/jest.config.js) [![Bulma](https://img.shields.io/badge/Bulma-v1.0+-00d1b2.svg)](https://bulma.io) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) -[![Socket Badge](https://socket.dev/api/badge/npm/package/@allxsmith/bestax-bulma)](https://socket.dev/npm/package/@allxsmith/bestax-bulma/overview) +[![Socket Badge](https://badge.socket.dev/npm/package/@allxsmith/bestax-bulma/latest)](https://socket.dev/npm/package/@allxsmith/bestax-bulma/overview) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/allxsmith/bestax/badge)](https://scorecard.dev/viewer/?uri=github.com/allxsmith/bestax) [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/14361/badge)](https://www.bestpractices.dev/projects/14361) [![npm provenance](https://img.shields.io/badge/npm-provenance-3fb950.svg)](https://www.npmjs.com/package/@allxsmith/bestax-bulma#provenance) From d473c07cee439d57f908300e6e4788818d361385 Mon Sep 17 00:00:00 2001 From: Alex Smith Date: Tue, 22 Sep 2026 01:20:35 -0400 Subject: [PATCH 2/6] fix(create-bestax): serve the Socket badge from badge.socket.dev The old `socket.dev/api/badge/...` path sits behind a Cloudflare bot challenge, so GitHub's camo proxy gets a 403 interstitial back instead of an SVG and the badge renders broken. `badge.socket.dev` is the host Socket serves badges from, and camo is allowlisted for it. Keep the `/latest` segment: it is the spelling every real-world usage carries, and the one verified to return 200 image/svg+xml through camo for create-bestax. Patch release so the README npm serves picks the fix up. --- create-bestax/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/create-bestax/README.md b/create-bestax/README.md index acd1a0eaa..d9f03f264 100644 --- a/create-bestax/README.md +++ b/create-bestax/README.md @@ -3,7 +3,7 @@ [![npm version](https://img.shields.io/npm/v/create-bestax.svg)](https://www.npmjs.com/package/create-bestax) [![npm downloads](https://img.shields.io/npm/dm/create-bestax.svg)](https://www.npmjs.com/package/create-bestax) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) -[![Socket Badge](https://socket.dev/api/badge/npm/package/create-bestax)](https://socket.dev/npm/package/create-bestax/overview) +[![Socket Badge](https://badge.socket.dev/npm/package/create-bestax/latest)](https://socket.dev/npm/package/create-bestax/overview) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/allxsmith/bestax/badge)](https://scorecard.dev/viewer/?uri=github.com/allxsmith/bestax) [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/14361/badge)](https://www.bestpractices.dev/projects/14361) [![npm provenance](https://img.shields.io/badge/npm-provenance-3fb950.svg)](https://www.npmjs.com/package/create-bestax#provenance) From 1cd6dabe0841f62c57b68c0a81a76ad063606b09 Mon Sep 17 00:00:00 2001 From: Alex Smith Date: Tue, 22 Sep 2026 01:20:36 -0400 Subject: [PATCH 3/6] fix(bestax-migrate): serve the Socket badge from badge.socket.dev The old `socket.dev/api/badge/...` path sits behind a Cloudflare bot challenge, so GitHub's camo proxy gets a 403 interstitial back instead of an SVG and the badge renders broken. `badge.socket.dev` is the host Socket serves badges from, and camo is allowlisted for it. Keep the `/latest` segment: it is the spelling every real-world usage carries, and the one verified to return 200 image/svg+xml through camo for bestax-migrate. Patch release so the README npm serves picks the fix up. --- bestax-migrate/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bestax-migrate/README.md b/bestax-migrate/README.md index 22d1344ad..1548dbfac 100644 --- a/bestax-migrate/README.md +++ b/bestax-migrate/README.md @@ -3,7 +3,7 @@ [![npm version](https://img.shields.io/npm/v/bestax-migrate.svg)](https://www.npmjs.com/package/bestax-migrate) [![npm downloads](https://img.shields.io/npm/dm/bestax-migrate.svg)](https://www.npmjs.com/package/bestax-migrate) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) -[![Socket Badge](https://socket.dev/api/badge/npm/package/bestax-migrate)](https://socket.dev/npm/package/bestax-migrate/overview) +[![Socket Badge](https://badge.socket.dev/npm/package/bestax-migrate/latest)](https://socket.dev/npm/package/bestax-migrate/overview) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/allxsmith/bestax/badge)](https://scorecard.dev/viewer/?uri=github.com/allxsmith/bestax) [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/14361/badge)](https://www.bestpractices.dev/projects/14361) [![npm provenance](https://img.shields.io/badge/npm-provenance-3fb950.svg)](https://www.npmjs.com/package/bestax-migrate#provenance) From 2fe0a45672a552c55b329ffff31f1b6e6df9d474 Mon Sep 17 00:00:00 2001 From: Alex Smith Date: Tue, 22 Sep 2026 01:20:36 -0400 Subject: [PATCH 4/6] fix(bestax-mcp): serve the Socket badge from badge.socket.dev The old `socket.dev/api/badge/...` path sits behind a Cloudflare bot challenge, so GitHub's camo proxy gets a 403 interstitial back instead of an SVG and the badge renders broken. `badge.socket.dev` is the host Socket serves badges from, and camo is allowlisted for it. Keep the `/latest` segment: it is the spelling every real-world usage carries, and the one verified to return 200 image/svg+xml through camo for bestax-mcp. Patch release so the README npm serves picks the fix up. --- bestax-mcp/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bestax-mcp/README.md b/bestax-mcp/README.md index 1b1cc9e04..efefd2866 100644 --- a/bestax-mcp/README.md +++ b/bestax-mcp/README.md @@ -3,7 +3,7 @@ [![npm version](https://img.shields.io/npm/v/bestax-mcp.svg)](https://www.npmjs.com/package/bestax-mcp) [![npm downloads](https://img.shields.io/npm/dm/bestax-mcp.svg)](https://www.npmjs.com/package/bestax-mcp) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) -[![Socket Badge](https://socket.dev/api/badge/npm/package/bestax-mcp)](https://socket.dev/npm/package/bestax-mcp/overview) +[![Socket Badge](https://badge.socket.dev/npm/package/bestax-mcp/latest)](https://socket.dev/npm/package/bestax-mcp/overview) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/allxsmith/bestax/badge)](https://scorecard.dev/viewer/?uri=github.com/allxsmith/bestax) [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/14361/badge)](https://www.bestpractices.dev/projects/14361) [![npm provenance](https://img.shields.io/badge/npm-provenance-3fb950.svg)](https://www.npmjs.com/package/bestax-mcp#provenance) From 15d4d9b4184f72ea35272c7a4fefe17be254841f Mon Sep 17 00:00:00 2001 From: Alex Smith Date: Tue, 22 Sep 2026 01:20:37 -0400 Subject: [PATCH 5/6] fix(eslint-plugin): serve the Socket badge from badge.socket.dev The old `socket.dev/api/badge/...` path sits behind a Cloudflare bot challenge, so GitHub's camo proxy gets a 403 interstitial back instead of an SVG and the badge renders broken. `badge.socket.dev` is the host Socket serves badges from, and camo is allowlisted for it. Keep the `/latest` segment: it is the spelling every real-world usage carries, and the one verified to return 200 image/svg+xml through camo for @allxsmith/eslint-plugin-bestax. Patch release so the README npm serves picks the fix up. --- eslint-plugin/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eslint-plugin/README.md b/eslint-plugin/README.md index 0cba62cee..b095acc1a 100644 --- a/eslint-plugin/README.md +++ b/eslint-plugin/README.md @@ -3,7 +3,7 @@ [![npm version](https://img.shields.io/npm/v/@allxsmith/eslint-plugin-bestax.svg)](https://www.npmjs.com/package/@allxsmith/eslint-plugin-bestax) [![npm downloads](https://img.shields.io/npm/dm/@allxsmith/eslint-plugin-bestax.svg)](https://www.npmjs.com/package/@allxsmith/eslint-plugin-bestax) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) -[![Socket Badge](https://socket.dev/api/badge/npm/package/@allxsmith/eslint-plugin-bestax)](https://socket.dev/npm/package/@allxsmith/eslint-plugin-bestax/overview) +[![Socket Badge](https://badge.socket.dev/npm/package/@allxsmith/eslint-plugin-bestax/latest)](https://socket.dev/npm/package/@allxsmith/eslint-plugin-bestax/overview) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/allxsmith/bestax/badge)](https://scorecard.dev/viewer/?uri=github.com/allxsmith/bestax) [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/14361/badge)](https://www.bestpractices.dev/projects/14361) [![Security policy](https://img.shields.io/badge/security-policy-blue.svg)](https://github.com/allxsmith/bestax/blob/main/SECURITY.md) From 18aec08626928eeba96c6901f5db9da969c3d2bf Mon Sep 17 00:00:00 2001 From: Alex Smith Date: Tue, 22 Sep 2026 01:20:38 -0400 Subject: [PATCH 6/6] docs: serve the root README Socket badge from badge.socket.dev Same host move as the package READMEs. The root README is not published to npm (the root manifest is private), so this carries no release. --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 2b25523b3..ad4fc9d81 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ [![Coverage](https://img.shields.io/badge/coverage-99%25-brightgreen.svg)](https://github.com/allxsmith/bestax/blob/main/bulma-ui/jest.config.js) [![Bulma](https://img.shields.io/badge/Bulma-v1.0+-00d1b2.svg)](https://bulma.io) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) -[![Socket Badge](https://socket.dev/api/badge/npm/package/@allxsmith/bestax-bulma)](https://socket.dev/npm/package/@allxsmith/bestax-bulma/overview) +[![Socket Badge](https://badge.socket.dev/npm/package/@allxsmith/bestax-bulma/latest)](https://socket.dev/npm/package/@allxsmith/bestax-bulma/overview) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/allxsmith/bestax/badge)](https://scorecard.dev/viewer/?uri=github.com/allxsmith/bestax) [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/14361/badge)](https://www.bestpractices.dev/projects/14361) [![npm provenance](https://img.shields.io/badge/npm-provenance-3fb950.svg)](https://www.npmjs.com/package/@allxsmith/bestax-bulma#provenance)