
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
@archsmith/renderer
Advanced tools
ArchSmith diagram renderer — validated IR in, SVG out. Pure library, no agent/LLM dependency.
The ArchSmith renderer — a validated diagram IR in, a complete SVG document out. Pure function, no I/O beyond reading its own bundled font, no LLM dependency.
See the root README for what ArchSmith is, what the IR looks like, and why the renderer is built this way.
import { render, validate } from "@archsmith/renderer";
const result = validate(ir); // { valid: boolean, errors: string[] }
if (result.valid) {
const svg = render(ir); // complete SVG document, as a string
}
render() validates the IR itself before rendering (pass { skipValidate: true } to skip, e.g. if you've already validated). By default it embeds the bundled Arimo font into the output SVG so a diagram renders identically regardless of what's installed on the machine viewing it — pass { embedFonts: false } to skip that and get a smaller file.
validate() / validateStructure() / validateRegistryReferences() — schema (structural) and registry-reference (semantic) validation against @archsmith/schema.render() — the full IR → SVG pipeline: measure, lay out five columns, assemble, optionally embed fonts.measureText() / wrapText() — real glyph-advance-width text measurement (via fontkit against the bundled Arimo font) and word wrapping, used throughout layout instead of a flat character-count heuristic.rect, text, pill, actorBox, itemBox, clusterBox, gatewayBox, layerFrame, …) if you want to compose diagram fragments yourself rather than going through render().Everything here is content-driven: box sizes, text wrapping, and row heights are computed from the actual IR content, never a fixed number the caller supplies and hopes is big enough.
Apache-2.0
FAQs
ArchSmith diagram renderer — validated IR in, SVG out. Pure library, no agent/LLM dependency.
The npm package @archsmith/renderer receives a total of 41 weekly downloads. As such, @archsmith/renderer popularity was classified as not popular.
We found that @archsmith/renderer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.