@dytsou/github-readme-stats 1.0.1

package/api/top-langs.js

@@ -0,0 +1,163 @@
+// @ts-check
+
+import { renderTopLanguages } from "../src/cards/top-languages.js";
+import { guardAccess } from "../src/common/access.js";
+import {
+  createValidatedColorOptions,
+  handleApiError,
+  sendValidationError,
+  setSvgContentType,
+  parseNumericParam,
+} from "../src/common/api-utils.js";
+import {
+  CACHE_TTL,
+  resolveCacheSeconds,
+  setCacheHeaders,
+} from "../src/common/cache.js";
+import { parseArray, parseBoolean } from "../src/common/ops.js";
+import { fetchTopLanguages } from "../src/fetchers/top-languages.js";
+import { isLocaleAvailable } from "../src/translations.js";
+
+/** @type {readonly string[]} */
+const VALID_LAYOUTS = ["compact", "normal", "donut", "donut-vertical", "pie"];
+
+/** @type {readonly string[]} */
+const VALID_STATS_FORMATS = ["bytes", "percentages"];
+
+// @ts-ignore
+export default async (req, res) => {
+  const {
+    username,
+    hide,
+    hide_title,
+    hide_border,
+    card_width,
+    title_color,
+    text_color,
+    bg_color,
+    theme,
+    cache_seconds,
+    layout,
+    langs_count,
+    exclude_repo,
+    size_weight,
+    count_weight,
+    custom_title,
+    locale: rawLocale,
+    border_radius,
+    border_color,
+    disable_animations,
+    hide_progress,
+    stats_format,
+  } = req.query;
+
+  // Only allow supported locales - validate and sanitize to prevent XSS
+  const locale =
+    typeof rawLocale === "string" && isLocaleAvailable(rawLocale)
+      ? rawLocale.toLowerCase()
+      : undefined;
+
+  // Create validated color options once for reuse
+  const colorOptions = createValidatedColorOptions({
+    title_color,
+    text_color,
+    bg_color,
+    border_color,
+    theme,
+  });
+
+  // Validate username is provided
+  if (!username) {
+    return sendValidationError({
+      res,
+      message: "Missing username parameter",
+      secondaryMessage: "Please provide a username",
+      colorOptions,
+    });
+  }
+
+  // Set Content-Type early for Camo CDN compatibility
+  setSvgContentType(res);
+
+  const access = guardAccess({
+    res,
+    id: username,
+    type: "username",
+    colors: colorOptions,
+  });
+  if (!access.isPassed) {
+    return access.result;
+  }
+
+  // Validate layout parameter
+  if (
+    layout !== undefined &&
+    (typeof layout !== "string" || !VALID_LAYOUTS.includes(layout))
+  ) {
+    return sendValidationError({
+      res,
+      message: "Something went wrong",
+      secondaryMessage: "Incorrect layout input",
+      colorOptions,
+    });
+  }
+
+  // Validate stats_format parameter
+  if (
+    stats_format !== undefined &&
+    (typeof stats_format !== "string" ||
+      !VALID_STATS_FORMATS.includes(stats_format))
+  ) {
+    return sendValidationError({
+      res,
+      message: "Something went wrong",
+      secondaryMessage: "Incorrect stats_format input",
+      colorOptions,
+    });
+  }
+
+  try {
+    const topLangs = await fetchTopLanguages(
+      username,
+      parseArray(exclude_repo),
+      size_weight,
+      count_weight,
+    );
+    const cacheSeconds = resolveCacheSeconds({
+      requested: parseInt(cache_seconds, 10),
+      def: CACHE_TTL.TOP_LANGS_CARD.DEFAULT,
+      min: CACHE_TTL.TOP_LANGS_CARD.MIN,
+      max: CACHE_TTL.TOP_LANGS_CARD.MAX,
+    });
+
+    setCacheHeaders(res, cacheSeconds);
+
+    return res.send(
+      renderTopLanguages(topLangs, {
+        // Validate custom_title is a string (prevents array from duplicate query params)
+        // Card.js handles HTML encoding internally
+        custom_title:
+          typeof custom_title === "string" ? custom_title : undefined,
+        hide_title: parseBoolean(hide_title),
+        hide_border: parseBoolean(hide_border),
+        card_width: parseInt(card_width, 10),
+        hide: parseArray(hide),
+        title_color: colorOptions.title_color,
+        text_color: colorOptions.text_color,
+        bg_color: colorOptions.bg_color,
+        // @ts-ignore - validateTheme returns a validated theme name
+        theme: colorOptions.theme,
+        layout,
+        langs_count,
+        border_radius: parseNumericParam(border_radius, undefined, 0, 50),
+        border_color: colorOptions.border_color,
+        locale,
+        disable_animations: parseBoolean(disable_animations),
+        hide_progress: parseBoolean(hide_progress),
+        stats_format,
+      }),
+    );
+  } catch (err) {
+    return handleApiError({ res, error: err, colorOptions });
+  }
+};

package/api/wakatime.js

@@ -0,0 +1,129 @@
+// @ts-check
+
+import { renderWakatimeCard } from "../src/cards/wakatime.js";
+import { guardAccess } from "../src/common/access.js";
+import {
+  createValidatedColorOptions,
+  handleApiError,
+  setSvgContentType,
+  parseNumericParam,
+} from "../src/common/api-utils.js";
+import {
+  CACHE_TTL,
+  resolveCacheSeconds,
+  setCacheHeaders,
+} from "../src/common/cache.js";
+import { validateColor } from "../src/common/color.js";
+import { parseArray, parseBoolean } from "../src/common/ops.js";
+import { fetchWakatimeStats } from "../src/fetchers/wakatime.js";
+import { isLocaleAvailable } from "../src/translations.js";
+
+/** @type {number} */
+const DEFAULT_BORDER_RADIUS = 4.5;
+
+/** @type {number} */
+const MAX_BORDER_RADIUS = 20;
+
+// @ts-ignore
+export default async (req, res) => {
+  const {
+    username,
+    title_color,
+    icon_color,
+    hide_border,
+    card_width,
+    line_height,
+    text_color,
+    bg_color,
+    theme,
+    cache_seconds,
+    hide_title,
+    hide_progress,
+    custom_title,
+    locale: rawLocale,
+    layout,
+    langs_count,
+    hide,
+    api_domain,
+    border_radius,
+    border_color,
+    display_format,
+    disable_animations,
+  } = req.query;
+
+  // Only allow supported locales - validate and sanitize to prevent XSS
+  const locale =
+    typeof rawLocale === "string" && isLocaleAvailable(rawLocale)
+      ? rawLocale.toLowerCase()
+      : undefined;
+
+  setSvgContentType(res);
+
+  // Create validated color options once for reuse
+  const colorOptions = createValidatedColorOptions({
+    title_color,
+    text_color,
+    bg_color,
+    border_color,
+    theme,
+  });
+
+  const access = guardAccess({
+    res,
+    id: username,
+    type: "wakatime",
+    colors: colorOptions,
+  });
+  if (!access.isPassed) {
+    return access.result;
+  }
+
+  try {
+    const stats = await fetchWakatimeStats({ username, api_domain });
+    const cacheSeconds = resolveCacheSeconds({
+      requested: parseInt(cache_seconds, 10),
+      def: CACHE_TTL.WAKATIME_CARD.DEFAULT,
+      min: CACHE_TTL.WAKATIME_CARD.MIN,
+      max: CACHE_TTL.WAKATIME_CARD.MAX,
+    });
+
+    setCacheHeaders(res, cacheSeconds);
+
+    return res.send(
+      renderWakatimeCard(stats, {
+        // Validate custom_title is a string (prevents array from duplicate query params)
+        // Card.js handles HTML encoding internally
+        custom_title:
+          typeof custom_title === "string" ? custom_title : undefined,
+        hide_title: parseBoolean(hide_title),
+        hide_border: parseBoolean(hide_border),
+        card_width: parseInt(card_width, 10),
+        hide: parseArray(hide),
+        line_height,
+        title_color: colorOptions.title_color,
+        icon_color: validateColor(icon_color),
+        text_color: colorOptions.text_color,
+        bg_color: colorOptions.bg_color,
+        // @ts-ignore - validateTheme ensures theme is valid ThemeNames
+        theme: colorOptions.theme,
+        hide_progress,
+        border_radius: parseNumericParam(
+          border_radius,
+          DEFAULT_BORDER_RADIUS,
+          0,
+          MAX_BORDER_RADIUS,
+        ),
+        border_color: colorOptions.border_color,
+        locale,
+        layout,
+        langs_count,
+        display_format,
+        disable_animations: parseBoolean(disable_animations),
+      }),
+    );
+  } catch (err) {
+    // handleApiError sanitizes error messages via sanitizeErrorMessage()
+    // which replaces unsafe patterns containing user data with safe alternatives
+    return handleApiError({ res, error: err, colorOptions });
+  }
+};

package/package.json

@@ -0,0 +1,102 @@
+{
+  "name": "@dytsou/github-readme-stats",
+  "version": "1.0.1",
+  "description": "Dynamically generate stats for your GitHub readme",
+  "keywords": [
+    "github-readme-stats",
+    "readme-stats",
+    "cards",
+    "card-generator"
+  ],
+  "main": "src/index.js",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.js",
+    "./worker": "./src/worker.ts"
+  },
+  "files": [
+    "src",
+    "api",
+    "themes",
+    "LICENSE",
+    "readme.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://github.com/anuraghazra/github-readme-stats",
+  "bugs": {
+    "url": "https://github.com/anuraghazra/github-readme-stats/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/anuraghazra/github-readme-stats.git"
+  },
+  "author": "Anurag Hazra",
+  "license": "MIT",
+  "devDependencies": {
+    "@actions/core": "^1.11.1",
+    "@actions/github": "^6.0.1",
+    "@eslint/eslintrc": "^3.3.1",
+    "@eslint/js": "^9.39.0",
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@types/escape-html": "^1.0.4",
+    "@uppercod/css-to-object": "^1.1.1",
+    "@vitest/coverage-v8": "^4.0.15",
+    "@vitest/ui": "^4.0.15",
+    "axios-mock-adapter": "^2.1.0",
+    "color-contrast-checker": "^2.1.0",
+    "eslint": "^9.39.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-jsdoc": "^61.1.12",
+    "express": "^5.1.0",
+    "globals": "^16.5.0",
+    "happy-dom": "^20.0.11",
+    "hjson": "^3.2.2",
+    "husky": "^9.1.7",
+    "js-yaml": "^4.1.0",
+    "jsdom": "^27.2.0",
+    "lint-staged": "^16.2.6",
+    "lodash.snakecase": "^4.1.1",
+    "parse-diff": "^0.11.1",
+    "prettier": "^3.6.2",
+    "vitest": "^4.0.15"
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.19.6",
+    "axios": "^1.13.1",
+    "dotenv": "^17.2.3",
+    "emoji-name-map": "^2.0.3",
+    "escape-html": "^1.0.3",
+    "github-username-regex": "^1.0.0",
+    "hono": "^4.10.7",
+    "word-wrap": "^1.2.5"
+  },
+  "lint-staged": {
+    "*.{js,css,md}": "prettier --write"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "test": "mkdir -p .coverage-tmp && vitest run --coverage",
+    "test:watch": "vitest watch",
+    "test:ui": "vitest --ui",
+    "test:update:snapshot": "vitest run -u",
+    "test:e2e": "vitest run --config vitest.e2e.config.js",
+    "theme-readme-gen": "node scripts/generate-theme-doc",
+    "preview-theme": "node scripts/preview-theme",
+    "close-stale-theme-prs": "node scripts/close-stale-theme-prs",
+    "generate-langs-json": "node scripts/generate-langs-json",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "lint": "NPM_CONFIG_LOGLEVEL=error npx eslint --max-warnings 0 \"./src/**/*.js\" \"./scripts/**/*.js\" \"./tests/**/*.js\" \"./api/**/*.js\" \"./themes/**/*.js\"",
+    "bench": "vitest run --config vitest.bench.config.js",
+    "deploy": "wrangler deploy",
+    "deploy:preview": "wrangler deploy --env preview",
+    "publish:npm": "pnpm publish --access public --no-git-checks --registry https://registry.npmjs.org",
+    "publish:github": "pnpm publish --access public --no-git-checks --registry https://npm.pkg.github.com",
+    "publish:all": "pnpm run publish:npm && pnpm run publish:github"
+  }
+}