README badges are vulnerabilities

TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version

Badges

cdk-badges - npm Package Health Analysis

Badge Images Often Fail To Load In Github README · Issue #1568

Displaying Google Analytics metrics in your README

Badges for your projects - DEV Community

Sonarqube quality badges on gitlab - Stack Overflow

Badges

readme-badges · GitHub Topics · GitHub

repo-badges/snyk-security-scanning.md at main · dwyl/repo-badges

Host Vulnerability Management - User Guide

badges in `README` are not getting rendered · Issue #1207 · r-lib

Badges inside tables render poorly on mobile devices. · Issue

Badges - TL;DR for your repository's README - DEV Community