
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
@vexralabs/zerodom
Advanced tools
TypeScript port of ZeroDOM's core engine — same interaction graph, same selector guarantees, for the Node/TS agent stack (LangChain.js, the Vercel AI SDK, Playwright for Node).
This is a v1 port: the parser, label linker, and a one-line Playwright adapter.
The CLI, MCP server, and HTML report inspector are still Python-only — this package
is the piece most JS agents actually need (ZeroDOM.fromPage(page) →
graph.toCompactText()), not the whole toolchain. See the root
README for the full feature set and design rationale; the logic
here is a line-for-line port of ../zerodom/parser.py and ../zerodom/label_linker.py,
so the same design notes (selector priority, label priority, escaping rules) apply.
npm install @vexralabs/zerodom
import { ZeroDOM } from "@vexralabs/zerodom";
const graph = await ZeroDOM.fromPage(page); // any object with content()/url(), e.g. a Playwright Page
console.log(graph.toCompactText()); // what you send the model
const selectors = graph.selectorMap(); // { node_01: "#email-input", ... } — stays your side
import { parseHtml } from "@vexralabs/zerodom";
const graph = parseHtml(html, url); // parse HTML you already have, no browser needed
linkedom gives a real querySelector/getElementById DOM — needed so every
generated selector can be self-verified, the same guarantee the Python version
makes against a real browser — at a fraction of jsdom's footprint. One caveat this
port works around: unlike jsdom or a real browser, linkedom's parser doesn't
normalize a bare HTML fragment into a full <html><body> document, so
ZeroDOMParser wraps non-document input itself before handing it to linkedom
(page.content() output is unaffected — it's always a full document already).
npm install
npm run build # tsc -> dist/
npm test # node's built-in test runner, against the built dist
FAQs
The deterministic attack-surface perception layer for AI security agents. Maps every actionable element of a live, logged-in Chrome page to a unique id; no LLM in the parse (TypeScript port).
The npm package @vexralabs/zerodom receives a total of 0 weekly downloads. As such, @vexralabs/zerodom popularity was classified as not popular.
We found that @vexralabs/zerodom demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.