
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@unowdev/docgraph
Advanced tools
Markdown文書の依存グラフを管理し、更新波及に応じて needs-check キューを生成するCLIです。
>=18)方式3(devDependency)を標準運用とします。
# 公開済みパッケージを使う場合
npm i -D @unowdev/docgraph
公開前にローカルパッケージを検証する場合:
# 利用側プロジェクトで実行(このリポジトリ構成の例)
npm i -D file:../../package
package.json 例:
{
"scripts": {
"docgraph": "docgraph"
}
}
実行例:
npm run docgraph -- init
npm run docgraph -- watch --once
npm run docgraph -- needs-check --json
CIの最小確認例:
npm ci
npm exec -- docgraph --help
方式3の詳細運用(配布チャネル、固定ポリシー、更新/移行/障害対応)は
demo/install_method3/OPERATIONS_GUIDE.md を参照してください。
配布物ドライラン(npm pack 生成tarballの利用側検証)は
demo/install_method3/tarball_release_smoke.sh を参照してください。
docgraph init
.docgraph/state.json を作成します。docgraph watch
.md 走査、deps/rdeps 構築、未登録文書 versions=1)を行い、継続監視します。docgraph needs-check
needs-check 文書を決定的順序(impact 降順、path 昇順)で表示します。docgraph needs-check --json
reason / changedUpstreams / diffRefs を含むJSONを返します。docgraph next --json
null)。docgraph mark <path> [--actor <id>] [--summary <text>]
completion に記録し、audit を追記して clean に遷移させます。broken 文書は mark できません。versions: 文書ごとの整数バージョンdeps: 参照元 -> 参照先rdeps: 参照先 -> 参照元status: clean | needs-check | brokencompletion: mark 時点の { checkedAt, snapshot }broken: 解決不能参照の理由queue: needs-check キュー(path, priorityKey, reason, changedUpstreams)diffs: 直前版との差分参照(diffRef は .docgraph/diffs/...)audit: mark の監査証跡audit[path] には mark 実行ごとに以下が追記されます。
at: 実行時刻actor: 実行者(--actor、DOCGRAPH_ACTOR、USER、unknown の順で解決)snapshot: 依存閉包+自身のバージョン写像reviewedUpstreams: mark 実行時点での changedUpstreamsresultSummary: 任意の要約テキストdocHash: 対象文書内容のSHA-256FAQs
Markdown dependency watcher and consistency queue CLI
The npm package @unowdev/docgraph receives a total of 3 weekly downloads. As such, @unowdev/docgraph popularity was classified as not popular.
We found that @unowdev/docgraph demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.