
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@juanisidoro/mako-js
Advanced tools
JavaScript library for parsing, generating, and serving MAKO files — the open standard for LLM-optimized web content
JavaScript/TypeScript library for MAKO — the open standard for serving LLM-optimized content on the web.
.mako.md files with full TypeScript typesnpm install mako-js
import { parseMakoFile, generateMakoFile, cefEncode, cefDecode } from 'mako-js';
// Parse a .mako.md file
const file = parseMakoFile(makoContent);
console.log(file.frontmatter.entity); // "Nike Air Max 90"
// Generate a .mako.md file
const output = generateMakoFile(file);
// CEF encode/decode embeddings
const encoded = cefEncode([0.1, -0.3, 0.5, ...]);
const decoded = cefDecode(encoded, 512);
import express from 'express';
import { makoMiddleware } from 'mako-js/middleware/express';
const app = express();
app.use(makoMiddleware({ dir: './mako-files' }));
app.use(express.static('./html-files'));
npm run demo # Start demo server on localhost:3000
npm run benchmark # Compare HTML vs Cloudflare MD vs MAKO tokens
npm test # Run tests
Apache-2.0
FAQs
JavaScript library for parsing, generating, and serving MAKO files — the open standard for LLM-optimized web content
We found that @juanisidoro/mako-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.