
Security News
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.
@botpress/node-svm
Advanced tools
This package is a nodejs binding for Libsvm.
It's strongly inspired by node-svm, but shares no lines of code with it and has a fairly different API.
It's developed and maintained by the botpress team which is by far the best conversational AI platform there is for nodejs environment (probably the best conversational AI platform there is at all).
Why did we make a complete reimplementation? What is different from previous node-svm ? There's actually two reasons:
node-svm doesn't build for nodejs version > 10...
It's written using Native Abstractions for Node.js (nan) which is an old API for node binding developpement.
Our binding is written using node-addon-api (napi) which is intended to insulate addons from changes in the underlying JavaScript engine…
node-svm is not a simple wrapper, it does add some extra logic which we don't think a node binding should be doing. Our binding is a much simpler wrapper and add no unnecessary logic to Libsvm.
To install locally in a project, simply type command
yarn add @botpress/node-svm
Here's an example of how to use
const { makeSvm } = require('@botpress/node-svm')
async function main() {
const svm = await makeSvm()
const train_params = {
svm_type: 0,
kernel_type: 2,
degree: 3,
gamma: 0.5,
coef0: 0.0,
cache_size: 100,
eps: 0.1,
C: 1.0,
nr_weight: 0,
weight_label: [0, 0],
weight: [0.0, 0.0],
nu: 0.5,
p: 0.0,
shrinking: 1,
probability: 0
}
const x = [
[0, 0],
[0, 1],
[1, 0],
[1, 1]
]
const y = [0, 1, 1, 0]
svm.train(train_params, x, y)
const model_object = svm.get_model() // this is equivalent to the svm_model object of libsvm
console.log(model_object)
svm.set_model(model_object) // for testing purposes (not mandatory)
const prediction = svm.predict([1, 1]) // outputs 0
console.log('prediction', prediction)
}
main()
.then(() => console.log('Done.'))
.catch((err) => console.log(err))
For more details about training parameters, check out cjlin1/libsvm readme file.
FAQs
node bindings for libsvm
We found that @botpress/node-svm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.