
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Jutsu is a very simple graphing library for the web, with support for Smolder built-in.
This means it can attempt to handle any data that's thrown at it, regardless of structure, and produce a graph.
To see examples, and read the documentation, check out this notebook.

npm install jutsu
Jutsu works fine on its own, but to get the automatic data reshaping, you'll need Smolder too.
npm install smolder
var Smolder = require('smolder');
var Jutsu = require('jutsu');
// graphElement is the DOM element where we want to put the graphs.
var graphs = Smolder(Jutsu(graphElement));
// We can then create a graph using, e.g.:
graphs.pieChart(data);
The optional parameter [hints] is a string, or array of strings, which tells Jutsu which part of the data we are interested in.
pieChart(data, [hints])barChart(data, xLabel, yLabel, [hints])lineChart(data, xLabel, yLabel, [hints])scatterPlot(data, xLabel, yLabel, [hints])Each function will return the reshaped data.
If you have any issues, please file an issue. If your problem is with the way the data is reshaped, please file your issue over at Reshaper, the library that does all the heavy lifting.
Jutsu is a part of my Master's project at Imperial College London, and as part of my evaluation I'd really love to hear any feedback you might have. Feel free to shoot me an email.
FAQs
One-line graphs with Smolder support
We found that jutsu demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.