
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@on-panda/on-panda
Advanced tools
A web app for token visualization and control, model inspection, data annotation, and more.
A web app for token visualization and control, model inspection, data annotation, and more.
onPanda is designed for geeks, power users, curious minds, and engineers. Its UI is built for deep exploration and efficient data annotation.
Try it online (works on mobile): https://onpanda.diyer22.com/
Requires Node.js and npm.
npx -y @on-panda/serve --port 8080 --web_config web_config.json5
The optional --web_config flag provides preset LLM API configurations to the onPanda UI.
Example web_config.json5:
{
apiConfigs: [
{
endpoint_name: 'my-api',
tag_name: 'my-model',
client_config: {
base_url: 'https://vllm-test-api.diyer22.com/v1',
api_key: 'YOUR_API_KEY',
},
chat_config: {
model: 'your-model-name', // If omitted, onPanda fetches the model list from the endpoint's `/models` API.
top_logprobs: 20,
},
},
]
}
You can also add an API configuration through Custom API Config in the onPanda UI. Custom configurations are stored in browser local storage.
FAQs
A web app for token visualization and control, model inspection, data annotation, and more.
The npm package @on-panda/on-panda receives a total of 346 weekly downloads. As such, @on-panda/on-panda popularity was classified as not popular.
We found that @on-panda/on-panda demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.