README badges are vulnerabilities

TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version

Code Repository Badges

jacoco-badge-generator/README.md at main · cicirello/jacoco-badge

Badge Images Often Fail To Load In Github README · Issue #1568

Feature request: Project badges · Issue #5633 · go-gitea/gitea

cdk-badges - npm Package Health Analysis

Project badges from private project into a private GitHub

repo-badges/README.md at main · dwyl/repo-badges · GitHub

Displaying Google Analytics metrics in your README

Add NPM Badge to README · Issue #2 · simonepri/pidtree · GitHub