
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
comark-diagrams
Advanced tools
PlantUML, Graphviz, D2, DBML, and ASCII diagrams drawn as inline SVG while parsing, through a Kroki server. A Comark plugin.
PlantUML, Graphviz, D2, DBML, GoAT, and Svgbob diagrams drawn as inline SVG while parsing, through a Kroki server, with no script. A Comark plugin for HTML, Vue, React, and Svelte.
pnpm add comark comark-diagrams
import { createHtmlRenderer } from "@comark/html";
import diagrams, { components } from "comark-diagrams/html";
const render = createHtmlRenderer({ plugins: [diagrams()], components });
```d2 [Login flow]
user -> api: POST /login
api -> db
```
```plantuml, ```graphviz or ```dot, ```d2, ```dbml, and ```goat or ```svgbob fences become SVG; a title in brackets names the diagram and shows under it.
Each diagram's source is sent to the Kroki server, https://kroki.io by default. To keep sources private, run your own with docker run -d -p 8000:8000 yuzutech/kroki and pass server: "http://localhost:8000". draw: false sends nothing and leaves the fences as code.
The SVG is sanitized: scripts, event handlers, foreignObject, animations, links that aren't to the web or within the drawing, and @import are dropped. A diagram that can't be drawn stays code, and the plugin adds a sentence to meta.issues with the tool's error or why the server couldn't be reached.
| Renderer | Import |
|---|---|
@comark/html | comark-diagrams/html: the styles are inlined |
@comark/vue | comark-diagrams/vue |
@comark/react | comark-diagrams/react |
@comark/svelte | comark-diagrams/svelte |
Each entry exports the parse plugin as default and the renderer's components. The Vue, React, and Svelte components add the styles when they mount; import comark-diagrams/style.css with your styles so a server-rendered page doesn't shift. The styles read the shared --comark-* tokens and sit in a comark CSS layer, so any plain rule of your own wins.
FAQs
PlantUML, Graphviz, D2, DBML, and ASCII diagrams drawn as inline SVG while parsing, through a Kroki server. A Comark plugin.
The npm package comark-diagrams receives a total of 387 weekly downloads. As such, comark-diagrams popularity was classified as not popular.
We found that comark-diagrams demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.