
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
craftdot is a wapper of graphviz to get pretty diagram for your architecture/services diagrams.
Get pretty diagram for your architecture/services with an easy way.
$ npm install craftdot
Render crafdot file and open it on browser by default.
$ craftdot example/example.craftdot
rebuilding...
server listening on http://127.0.0.1:3200
// this is a comment
node1
the attributes is compatible with Graphviz, so you can use any attribute exist in Graphviz.
node1[fillcolor: skyblue, style:filled]
list {
hosts:
- 172.16.1.4
- 172.16.1.5
}
key-vaule {
domain: "https://service.localdomain"
}
both {
hosts:
- 172.16.1.10
- 172.16.1.11
domain: "https://service.localdomain"
}
with-attributes [fillcolor: skyblue, style:filled]{
domain: "https://service.localdomain"
}
node1
node2
other
node*[fillcolor: skyblue, style:filled]
one group must contain at least one node or one group.
group cluster1 {
node1
node2
}
group cluster1 {
node1
node2
group sub-cluster1 {
node1
node2
}
}
node1
node2
node1 -> node2
node1
node2
node3
node1 -> node2,node3
same as node, the attributes is compatible with Graphviz, so you can use any attribute exist in Graphviz.
node1
node2
node1 -> node2 [label: "hi", color: "red"]
node1
node2
node3
db
node1,node2,node3 -> db
* -> db [color: red]
// node.craftdot
node1
node2
// edge.craftdot
node1 -> node2
// include.craftdot
include {"node.craftdot"}
include {"edge.craftdot"}
FAQs
craftdot is a wapper of graphviz to get pretty diagram for your architecture/services diagrams.
We found that craftdot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.