
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@deepgram/deepdown
Advanced tools
A markdown templating format for generating AI-ready documentation from JSON Schema, OpenAPI, and AsyncAPI specifications
Markdown templating format for generating AI-ready docs from JSON Schema, OpenAPI, and AsyncAPI specifications.
Built for vector stores and RAG (Retrieval Augmented Generation) workflows, Deepdown helps you create consistent, semantic documentation that's ready for AI applications.
Deepdown transforms API specifications and JSON Schema documents into markdown documentation using templating. The resulting output is optimized for:
# NPM
npm install -g @deepgram/deepdown
# PNPM
pnpm add -g @deepgram/deepdown
# Yarn
yarn global add @deepgram/deepdown
# Generate docs from an OpenAPI spec
deepdown build specs/openapi.yaml templates/api.deepdown --output docs/
# Generate docs from a JSON Schema
deepdown build specs/schema.json templates/schema.deepdown --output docs/
# Basic: Generate docs from a spec and template
deepdown build <spec-file> <template-file> --output <output-dir>
# Parse multiple spec files
deepdown build "specs/**/*.yaml" "templates/**/*.deepdown" --output docs/
# Resolve JSON Schema references
deepdown build specs/api.yaml templates/api.deepdown --output docs/ --resolve-refs
# Resolve security schemes in OpenAPI specs
deepdown build specs/api.yaml templates/api.deepdown --output docs/ --resolve-refs --resolve-security
Set up tab completion to make working with the CLI easier:
# Generate and install Bash completion
deepdown completion > ~/.deepdown-completion.bash
echo 'source ~/.deepdown-completion.bash' >> ~/.bashrc
source ~/.bashrc
# For ZSH users
deepdown completion --shell zsh > ~/.deepdown-completion.zsh
echo 'source ~/.deepdown-completion.zsh' >> ~/.zshrc
source ~/.zshrc
# For Fish shell
deepdown completion --shell fish > ~/.config/fish/completions/deepdown.fish
# For PowerShell
deepdown completion --shell powershell > ~/.deepdown-completion.ps1
echo '. ~/.deepdown-completion.ps1' >> $PROFILE
import deepdown from '@deepgram/deepdown';
// Generate docs from a spec and template
const docs = await deepdown.build(
'specs/api.yaml',
'templates/api.deepdown',
{
outputDir: 'docs/',
resolveRefs: true,
resolveSecurity: true
}
);
// Access specific functions
import { parseYamlFile, renderTemplate } from '@deepgram/deepdown';
const spec = await parseYamlFile('specs/api.yaml');
const markdown = await renderTemplate('# {{spec.info.title}}', { spec });
Deepdown templates use Handlebars syntax to access spec data:
# {{spec.info.title}}
{{spec.info.description}}
## Endpoints
{{#each spec.paths}}
{{#each this}}
### {{@key}} {{../key}}
{{summary}}
{{description}}
{{/each}}
{{/each}}
$ref
pointersFor more details, see PACKAGES.md.
Deepdown is a monorepo with multiple packages. See PACKAGES.md for details on the package structure and development workflow.
# Clone the repository
git clone https://github.com/deepgram/deepdown.git
cd deepdown
# Install dependencies
pnpm install
# Build all packages
npx lerna run build
MIT License - Copyright (c) 2025 Deepgram
FAQs
A markdown templating format for generating AI-ready documentation from JSON Schema, OpenAPI, and AsyncAPI specifications
The npm package @deepgram/deepdown receives a total of 1 weekly downloads. As such, @deepgram/deepdown popularity was classified as not popular.
We found that @deepgram/deepdown demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.