README badges are vulnerabilities

TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version

GitHub – How to display the status badge for a GitHub Action

Host Vulnerability Management - User Guide

Badges

Badges

Badges inside tables render poorly on mobile devices. · Issue

Status badges

cdk-badges - npm Package Health Analysis

Add Twitter Badge to Readme Template · Issue #88 · cloudposse

Legitimize Your Project With Some Badge Swag