README badges are vulnerabilities

TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version

badge-generator · GitHub Topics · GitHub

Display Build Status and Test Coverage Badges for a JavaScript

Validator open-source quality dashboard

Host Vulnerability Management - User Guide

GitHub - dwyl/repo-badges: :star: Use repo badges (build passing

Badges

Secure Open Source Dependencies with Sonatype DepShield

README badges fail to render · Issue #2805 · piskvorky/gensim · GitHub

Avoid The Node.js Security Storm. Keeping your 3rd party project

Top 5 Awesome Things to do in your README! - DEV Community

Badges inside tables render poorly on mobile devices. · Issue