{"id":6201,"date":"2026-11-01T12:02:33","date_gmt":"2026-11-01T17:02:33","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6201"},"modified":"2026-11-01T12:02:33","modified_gmt":"2026-11-01T17:02:33","slug":"devsecops-weekly-november-1-2026-interactive-topic-map","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6201","title":{"rendered":"DevSecOps Weekly &#8212; November 1, 2026 \u2014 Interactive Topic Map"},"content":{"rendered":"<p><iframe srcdoc=\"&lt;!DOCTYPE html&gt;\n&lt;html lang=&quot;en&quot;&gt;\n&lt;head&gt;\n&lt;meta charset=&quot;utf-8&quot;&gt;\n&lt;title&gt;DevSecOps Weekly \u2014 November 1, 2026 Topic Map&lt;\/title&gt;\n&lt;script src=&quot;https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/d3\/7.9.0\/d3.min.js&quot;&gt;&lt;\/script&gt;\n&lt;style&gt;\n  html, body { margin:0; padding:0; height:100%; background:#ffffff; font-family:-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif; }\n  #header { padding:18px 24px 10px; border-bottom:1px solid #e5e7eb; }\n  #header h1 { margin:0; font-size:20px; color:#0f172a; }\n  #header p { margin:6px 0 0; font-size:13px; color:#6b7280; }\n  #canvas-wrap { position:relative; width:100%; height:calc(100vh - 78px); }\n  svg { width:100%; height:100%; display:block; cursor:grab; }\n  svg:active { cursor:grabbing; }\n  .legend { position:absolute; top:14px; left:14px; background:rgba(255,255,255,0.95); border:1px solid #e5e7eb; border-radius:8px; padding:10px 14px; font-size:12px; color:#374151; box-shadow:0 1px 3px rgba(0,0,0,0.08); }\n  .legend-title { font-weight:600; font-size:11px; letter-spacing:.04em; text-transform:uppercase; color:#6b7280; margin-bottom:6px; }\n  .legend-row { display:flex; align-items:center; gap:7px; margin:3px 0; }\n  .legend-dot { width:11px; height:11px; border-radius:50%; flex:0 0 auto; }\n  .controls { position:absolute; top:14px; right:14px; display:flex; flex-direction:column; gap:6px; }\n  .controls button { width:32px; height:32px; border-radius:6px; border:1px solid #d1d5db; background:#ffffff; font-size:16px; cursor:pointer; color:#374151; }\n  .controls button:hover { background:#f3f4f6; }\n  .hint { position:absolute; bottom:12px; right:16px; font-size:11px; color:#9ca3af; }\n  .node-label { font-size:11px; fill:#1f2937; pointer-events:none; paint-order:stroke; stroke:#ffffff; stroke-width:3px; stroke-linejoin:round; }\n  .node-label.bold { font-weight:700; font-size:12px; }\n  .link { stroke:#94a3b8; stroke-opacity:0.55; }\n  .tooltip { position:absolute; pointer-events:auto; background:#0f172a; color:#f9fafb; font-size:12px; padding:8px 12px; border-radius:8px; opacity:0; transition:opacity .12s; max-width:280px; max-height:260px; overflow-y:auto; z-index:20; box-shadow:0 6px 18px rgba(0,0,0,0.28); }\n  .tooltip-head { font-size:12px; }\n  .tooltip-articles { margin-top:7px; padding-top:7px; border-top:1px solid rgba(255,255,255,0.18); }\n  .tooltip-articles-title { font-size:10px; text-transform:uppercase; letter-spacing:.05em; color:#94a3b8; margin-bottom:4px; }\n  .tooltip-articles a { display:block; color:#93c5fd; text-decoration:none; margin:4px 0; line-height:1.35; }\n  .tooltip-articles a:hover { text-decoration:underline; color:#bfdbfe; }\n&lt;\/style&gt;\n&lt;\/head&gt;\n&lt;body&gt;\n&lt;div id=&quot;header&quot;&gt;\n  &lt;h1&gt;DevSecOps Weekly \u2014 November 1, 2026 Topic Map&lt;\/h1&gt;\n  &lt;p&gt;Node size = mentions &amp;middot; edge thickness = co-mention frequency &amp;middot; scroll or pinch to zoom, drag the canvas to pan, drag a node to reposition it, hover a node for related articles.&lt;\/p&gt;\n&lt;\/div&gt;\n&lt;div id=&quot;canvas-wrap&quot;&gt;\n  &lt;svg id=&quot;canvas&quot;&gt;&lt;\/svg&gt;\n  &lt;div class=&quot;legend&quot; id=&quot;legend&quot;&gt;&lt;\/div&gt;\n  &lt;div class=&quot;controls&quot;&gt;\n    &lt;button id=&quot;zoom-in&quot; title=&quot;Zoom in&quot;&gt;+&lt;\/button&gt;\n    &lt;button id=&quot;zoom-out&quot; title=&quot;Zoom out&quot;&gt;&amp;minus;&lt;\/button&gt;\n    &lt;button id=&quot;zoom-reset&quot; title=&quot;Reset view&quot;&gt;&amp;#8634;&lt;\/button&gt;\n  &lt;\/div&gt;\n  &lt;div class=&quot;tooltip&quot; id=&quot;tooltip&quot;&gt;&lt;\/div&gt;\n  &lt;div class=&quot;hint&quot;&gt;Security Radar LLC &amp;middot; Newshunter interactive topic map&lt;\/div&gt;\n&lt;\/div&gt;\n&lt;script&gt;\nconst DATA = {&quot;nodes&quot;: [{&quot;id&quot;: &quot;cicd&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;CI\/CD tokens &amp; secrets&quot;, &quot;weight&quot;: 9, &quot;articles&quot;: [{&quot;title&quot;: &quot;LiteLLM supply chain attack started with an exposed master key&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/26\/litellm-supply-chain-attack-started-with-an-exposed-master-key\/5305544&quot;}, {&quot;title&quot;: &quot;Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/29\/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour\/5306153&quot;}, {&quot;title&quot;: &quot;Your npm install was safe. What happens when the package runs?&quot;, &quot;url&quot;: &quot;https:\/\/www.infoworld.com\/article\/4236783\/your-npm-install-was-safe-what-happens-when-the-package-runs.html&quot;}, {&quot;title&quot;: &quot;JFrog and Industry Judges Recognize Global Brands Bringing Trust to the Software Supply Chain in the AI Era&quot;, &quot;url&quot;: &quot;https:\/\/jfrog.com\/press-room\/jfrog-and-industry-judges-recognize-global-brands-bringing-trust-to-the-software-supply-chain\/&quot;}]}, {&quot;id&quot;: &quot;litellm&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;LiteLLM 1.107.0 (poisoned release)&quot;, &quot;weight&quot;: 7, &quot;articles&quot;: [{&quot;title&quot;: &quot;LiteLLM supply chain attack started with an exposed master key&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/26\/litellm-supply-chain-attack-started-with-an-exposed-master-key\/5305544&quot;}, {&quot;title&quot;: &quot;Your npm install was safe. What happens when the package runs?&quot;, &quot;url&quot;: &quot;https:\/\/www.infoworld.com\/article\/4236783\/your-npm-install-was-safe-what-happens-when-the-package-runs.html&quot;}, {&quot;title&quot;: &quot;Euro open source specialist proposes LLM gateway to ease token bills&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/26\/euro-open-source-specialist-proposes-llm-gateway-to-ease-token-bills\/5305170&quot;}]}, {&quot;id&quot;: &quot;masterkey&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Unrevoked master key&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;LiteLLM supply chain attack started with an exposed master key&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/26\/litellm-supply-chain-attack-started-with-an-exposed-master-key\/5305544&quot;}]}, {&quot;id&quot;: &quot;github&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;GitHub workflows &amp; CLI tokens&quot;, &quot;weight&quot;: 6, &quot;articles&quot;: [{&quot;title&quot;: &quot;LiteLLM supply chain attack started with an exposed master key&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/26\/litellm-supply-chain-attack-started-with-an-exposed-master-key\/5305544&quot;}, {&quot;title&quot;: &quot;Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/29\/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour\/5306153&quot;}, {&quot;title&quot;: &quot;Anthropic Says Nobody Needs a Mental Model of Claude Code. Practitioners Are Testing That&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/anthropic-code-review\/&quot;}]}, {&quot;id&quot;: &quot;radware&quot;, &quot;type&quot;: &quot;researcher&quot;, &quot;label&quot;: &quot;Radware (61-repo campaign)&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/29\/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour\/5306153&quot;}]}, {&quot;id&quot;: &quot;hidden&quot;, &quot;type&quot;: &quot;campaign&quot;, &quot;label&quot;: &quot;Hidden commands in issues\/PRs&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/29\/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour\/5306153&quot;}]}, {&quot;id&quot;: &quot;runtime&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Runtime package risk (npm)&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;Your npm install was safe. What happens when the package runs?&quot;, &quot;url&quot;: &quot;https:\/\/www.infoworld.com\/article\/4236783\/your-npm-install-was-safe-what-happens-when-the-package-runs.html&quot;}, {&quot;title&quot;: &quot;LiteLLM supply chain attack started with an exposed master key&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/26\/litellm-supply-chain-attack-started-with-an-exposed-master-key\/5305544&quot;}]}, {&quot;id&quot;: &quot;aireports&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;AI-found vulnerability reports&quot;, &quot;weight&quot;: 8, &quot;articles&quot;: [{&quot;title&quot;: &quot;256 Advisories in Five Months: Results from the Drupal AI Security Initiative&quot;, &quot;url&quot;: &quot;https:\/\/www.drupal.org\/blog\/256-advisories-in-five-months-results-from-the-drupal-ai-security-initiative&quot;}, {&quot;title&quot;: &quot;Before you file that AI bug report, OpenAI has some advice&quot;, &quot;url&quot;: &quot;https:\/\/cyberscoop.com\/openai-ai-generated-bug-reports\/&quot;}, {&quot;title&quot;: &quot;New OpenSSF Guide: Finding and Fixing Vulnerabilities Using AI&quot;, &quot;url&quot;: &quot;https:\/\/openssf.org\/blog\/2026\/10\/20\/new-openssf-guide-finding-and-fixing-vulnerabilities-using-ai\/&quot;}, {&quot;title&quot;: &quot;Robot eyeballs make open source more valuable&quot;, &quot;url&quot;: &quot;https:\/\/www.infoworld.com\/article\/4239955\/robot-eyeballs-make-open-source-more-valuable.html&quot;}, {&quot;title&quot;: &quot;AI slop is piling up highest on the biggest open-source projects&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/26\/linux-foundation-open-source-ai-slop\/?ref=feedbagel.com&quot;}]}, {&quot;id&quot;: &quot;drupal&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Drupal (256 advisories)&quot;, &quot;weight&quot;: 6, &quot;articles&quot;: [{&quot;title&quot;: &quot;256 Advisories in Five Months: Results from the Drupal AI Security Initiative&quot;, &quot;url&quot;: &quot;https:\/\/www.drupal.org\/blog\/256-advisories-in-five-months-results-from-the-drupal-ai-security-initiative&quot;}]}, {&quot;id&quot;: &quot;alphaomega&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Alpha-Omega&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;256 Advisories in Five Months: Results from the Drupal AI Security Initiative&quot;, &quot;url&quot;: &quot;https:\/\/www.drupal.org\/blog\/256-advisories-in-five-months-results-from-the-drupal-ai-security-initiative&quot;}]}, {&quot;id&quot;: &quot;openai&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;OpenAI Patch the Planet&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;Before you file that AI bug report, OpenAI has some advice&quot;, &quot;url&quot;: &quot;https:\/\/cyberscoop.com\/openai-ai-generated-bug-reports\/&quot;}, {&quot;title&quot;: &quot;256 Advisories in Five Months: Results from the Drupal AI Security Initiative&quot;, &quot;url&quot;: &quot;https:\/\/www.drupal.org\/blog\/256-advisories-in-five-months-results-from-the-drupal-ai-security-initiative&quot;}, {&quot;title&quot;: &quot;AGNTCon + MCPCon 2026: Agentic AI Foundation Adds Four Projects as MCP Turns to Security&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/agntcon-mcpcon-2026\/&quot;}, {&quot;title&quot;: &quot;Cheap AI tokens are running out&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/cheap-ai-tokens-are-running-out&quot;}]}, {&quot;id&quot;: &quot;openssf&quot;, &quot;type&quot;: &quot;standard&quot;, &quot;label&quot;: &quot;OpenSSF AI vuln-fixing guide&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;New OpenSSF Guide: Finding and Fixing Vulnerabilities Using AI&quot;, &quot;url&quot;: &quot;https:\/\/openssf.org\/blog\/2026\/10\/20\/new-openssf-guide-finding-and-fixing-vulnerabilities-using-ai\/&quot;}]}, {&quot;id&quot;: &quot;lf&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Linux Foundation&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;AI slop is piling up highest on the biggest open-source projects&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/26\/linux-foundation-open-source-ai-slop\/?ref=feedbagel.com&quot;}, {&quot;title&quot;: &quot;New OpenSSF Guide: Finding and Fixing Vulnerabilities Using AI&quot;, &quot;url&quot;: &quot;https:\/\/openssf.org\/blog\/2026\/10\/20\/new-openssf-guide-finding-and-fixing-vulnerabilities-using-ai\/&quot;}, {&quot;title&quot;: &quot;AGNTCon + MCPCon 2026: Agentic AI Foundation Adds Four Projects as MCP Turns to Security&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/agntcon-mcpcon-2026\/&quot;}]}, {&quot;id&quot;: &quot;policy&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;AI contribution policy &amp; disclosure&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;AI slop is piling up highest on the biggest open-source projects&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/26\/linux-foundation-open-source-ai-slop\/?ref=feedbagel.com&quot;}, {&quot;title&quot;: &quot;LibreOffice&#x27;s &#x27;no AI&#x27; stance meets LLM-assisted code&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/29\/libreoffices-no-ai-stance-meets-llm-assisted-code\/5306084&quot;}, {&quot;title&quot;: &quot;Anthropic Says Nobody Needs a Mental Model of Claude Code. Practitioners Are Testing That&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/anthropic-code-review\/&quot;}]}, {&quot;id&quot;: &quot;libreoffice&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;LibreOffice&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;LibreOffice&#x27;s &#x27;no AI&#x27; stance meets LLM-assisted code&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/29\/libreoffices-no-ai-stance-meets-llm-assisted-code\/5306084&quot;}]}, {&quot;id&quot;: &quot;sbom&quot;, &quot;type&quot;: &quot;standard&quot;, &quot;label&quot;: &quot;Signed SBOMs (SPDX\/CycloneDX)&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security&quot;, &quot;url&quot;: &quot;https:\/\/industrialcyber.co\/sbom\/enisa-links-sbom-automation-integrity-safeguards-and-lifecycle-management-to-software-supply-chain-security\/&quot;}, {&quot;title&quot;: &quot;JFrog and Industry Judges Recognize Global Brands Bringing Trust to the Software Supply Chain in the AI Era&quot;, &quot;url&quot;: &quot;https:\/\/jfrog.com\/press-room\/jfrog-and-industry-judges-recognize-global-brands-bringing-trust-to-the-software-supply-chain\/&quot;}, {&quot;title&quot;: &quot;Your npm install was safe. What happens when the package runs?&quot;, &quot;url&quot;: &quot;https:\/\/www.infoworld.com\/article\/4236783\/your-npm-install-was-safe-what-happens-when-the-package-runs.html&quot;}]}, {&quot;id&quot;: &quot;enisa&quot;, &quot;type&quot;: &quot;law&quot;, &quot;label&quot;: &quot;ENISA SBOM advisory&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security&quot;, &quot;url&quot;: &quot;https:\/\/industrialcyber.co\/sbom\/enisa-links-sbom-automation-integrity-safeguards-and-lifecycle-management-to-software-supply-chain-security\/&quot;}]}, {&quot;id&quot;: &quot;cra&quot;, &quot;type&quot;: &quot;law&quot;, &quot;label&quot;: &quot;EU Cyber Resilience Act&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security&quot;, &quot;url&quot;: &quot;https:\/\/industrialcyber.co\/sbom\/enisa-links-sbom-automation-integrity-safeguards-and-lifecycle-management-to-software-supply-chain-security\/&quot;}]}, {&quot;id&quot;: &quot;awards&quot;, &quot;type&quot;: &quot;campaign&quot;, &quot;label&quot;: &quot;JFrog Supply Chain Excellence Awards&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;JFrog and Industry Judges Recognize Global Brands Bringing Trust to the Software Supply Chain in the AI Era&quot;, &quot;url&quot;: &quot;https:\/\/jfrog.com\/press-room\/jfrog-and-industry-judges-recognize-global-brands-bringing-trust-to-the-software-supply-chain\/&quot;}]}, {&quot;id&quot;: &quot;anthropic&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Anthropic&quot;, &quot;weight&quot;: 7, &quot;articles&quot;: [{&quot;title&quot;: &quot;Anthropic Says Nobody Needs a Mental Model of Claude Code. Practitioners Are Testing That&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/anthropic-code-review\/&quot;}, {&quot;title&quot;: &quot;AGNTCon + MCPCon 2026: Agentic AI Foundation Adds Four Projects as MCP Turns to Security&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/agntcon-mcpcon-2026\/&quot;}, {&quot;title&quot;: &quot;256 Advisories in Five Months: Results from the Drupal AI Security Initiative&quot;, &quot;url&quot;: &quot;https:\/\/www.drupal.org\/blog\/256-advisories-in-five-months-results-from-the-drupal-ai-security-initiative&quot;}, {&quot;title&quot;: &quot;LibreOffice&#x27;s &#x27;no AI&#x27; stance meets LLM-assisted code&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/29\/libreoffices-no-ai-stance-meets-llm-assisted-code\/5306084&quot;}, {&quot;title&quot;: &quot;Cheap AI tokens are running out&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/cheap-ai-tokens-are-running-out&quot;}]}, {&quot;id&quot;: &quot;mcp&quot;, &quot;type&quot;: &quot;standard&quot;, &quot;label&quot;: &quot;MCP (security conformance, auth)&quot;, &quot;weight&quot;: 6, &quot;articles&quot;: [{&quot;title&quot;: &quot;AGNTCon + MCPCon 2026: Agentic AI Foundation Adds Four Projects as MCP Turns to Security&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/agntcon-mcpcon-2026\/&quot;}, {&quot;title&quot;: &quot;Google opens Android development to third-party AI agents and unveils new Gemini APIs&quot;, &quot;url&quot;: &quot;https:\/\/the-decoder.com\/google-opens-android-development-to-third-party-ai-agents-and-unveils-new-gemini-apis\/&quot;}, {&quot;title&quot;: &quot;JFrog and Industry Judges Recognize Global Brands Bringing Trust to the Software Supply Chain in the AI Era&quot;, &quot;url&quot;: &quot;https:\/\/jfrog.com\/press-room\/jfrog-and-industry-judges-recognize-global-brands-bringing-trust-to-the-software-supply-chain\/&quot;}]}, {&quot;id&quot;: &quot;aaif&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Agentic AI Foundation&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;AGNTCon + MCPCon 2026: Agentic AI Foundation Adds Four Projects as MCP Turns to Security&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/agntcon-mcpcon-2026\/&quot;}]}, {&quot;id&quot;: &quot;review&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Risk-tiered agent code review&quot;, &quot;weight&quot;: 6, &quot;articles&quot;: [{&quot;title&quot;: &quot;Anthropic Says Nobody Needs a Mental Model of Claude Code. Practitioners Are Testing That&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/anthropic-code-review\/&quot;}, {&quot;title&quot;: &quot;Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/26\/google-elephant-goldfish-model-plugin\/&quot;}, {&quot;title&quot;: &quot;Agentic Code Quality&quot;, &quot;url&quot;: &quot;https:\/\/www.oreilly.com\/radar\/agentic-code-quality\/&quot;}, {&quot;title&quot;: &quot;The Agentic Software Factory Hierarchy of Needs&quot;, &quot;url&quot;: &quot;https:\/\/www.oreilly.com\/radar\/the-agentic-software-factory-hierarchy-of-needs\/&quot;}]}, {&quot;id&quot;: &quot;egm&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;Google Elephant-Goldfish plugin&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/26\/google-elephant-goldfish-model-plugin\/&quot;}]}, {&quot;id&quot;: &quot;android&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;Android Studio agents &amp; CLI&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;Google opens Android development to third-party AI agents and unveils new Gemini APIs&quot;, &quot;url&quot;: &quot;https:\/\/the-decoder.com\/google-opens-android-development-to-third-party-ai-agents-and-unveils-new-gemini-apis\/&quot;}]}, {&quot;id&quot;: &quot;tokens&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Token costs &amp; seat subsidies&quot;, &quot;weight&quot;: 7, &quot;articles&quot;: [{&quot;title&quot;: &quot;Euro open source specialist proposes LLM gateway to ease token bills&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/26\/euro-open-source-specialist-proposes-llm-gateway-to-ease-token-bills\/5305170&quot;}, {&quot;title&quot;: &quot;Cheap AI tokens are running out&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/cheap-ai-tokens-are-running-out&quot;}, {&quot;title&quot;: &quot;Are You Getting Your Money&#x27;s Worth From AI?&quot;, &quot;url&quot;: &quot;https:\/\/www.oreilly.com\/radar\/are-you-getting-your-moneys-worth-from-ai\/&quot;}, {&quot;title&quot;: &quot;Amazon sends chills through its workforce with mixed message memo about AI use&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/31\/amazon-sends-chills-through-its-workforce-with-mixed-message-memo-about-ai-use-corey-quinn\/5306804&quot;}, {&quot;title&quot;: &quot;The Return of a Bad Engineering Metric: When AI Token Usage Becomes Performance Theater&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/the-return-of-a-bad-engineering-metric-when-ai-token-usage-becomes-performance-theater\/&quot;}]}, {&quot;id&quot;: &quot;aiven&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Aiven LLM gateway&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Euro open source specialist proposes LLM gateway to ease token bills&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/26\/euro-open-source-specialist-proposes-llm-gateway-to-ease-token-bills\/5305170&quot;}]}, {&quot;id&quot;: &quot;metric&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Token usage as a metric&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;The Return of a Bad Engineering Metric: When AI Token Usage Becomes Performance Theater&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/the-return-of-a-bad-engineering-metric-when-ai-token-usage-becomes-performance-theater\/&quot;}, {&quot;title&quot;: &quot;Amazon sends chills through its workforce with mixed message memo about AI use&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/31\/amazon-sends-chills-through-its-workforce-with-mixed-message-memo-about-ai-use-corey-quinn\/5306804&quot;}, {&quot;title&quot;: &quot;Cheap AI tokens are running out&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/cheap-ai-tokens-are-running-out&quot;}, {&quot;title&quot;: &quot;Are You Getting Your Money&#x27;s Worth From AI?&quot;, &quot;url&quot;: &quot;https:\/\/www.oreilly.com\/radar\/are-you-getting-your-moneys-worth-from-ai\/&quot;}, {&quot;title&quot;: &quot;Proton&#x27;s CTO wrote a manifesto for the AI coding age. It struck a nerve with engineers.&quot;, &quot;url&quot;: &quot;https:\/\/www.businessinsider.com\/protons-cto-ai-manifesto-software-engineers-coding-2026-10&quot;}]}, {&quot;id&quot;: &quot;amazon&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Amazon AI memo&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;Amazon sends chills through its workforce with mixed message memo about AI use&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/31\/amazon-sends-chills-through-its-workforce-with-mixed-message-memo-about-ai-use-corey-quinn\/5306804&quot;}]}], &quot;links&quot;: [{&quot;source&quot;: &quot;litellm&quot;, &quot;target&quot;: &quot;masterkey&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;masterkey&quot;, &quot;target&quot;: &quot;cicd&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;litellm&quot;, &quot;target&quot;: &quot;cicd&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;litellm&quot;, &quot;target&quot;: &quot;github&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;github&quot;, &quot;target&quot;: &quot;cicd&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;radware&quot;, &quot;target&quot;: &quot;hidden&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;hidden&quot;, &quot;target&quot;: &quot;github&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;hidden&quot;, &quot;target&quot;: &quot;cicd&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;radware&quot;, &quot;target&quot;: &quot;github&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;runtime&quot;, &quot;target&quot;: &quot;cicd&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;runtime&quot;, &quot;target&quot;: &quot;litellm&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;runtime&quot;, &quot;target&quot;: &quot;sbom&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;drupal&quot;, &quot;target&quot;: &quot;aireports&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;alphaomega&quot;, &quot;target&quot;: &quot;drupal&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;drupal&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;openai&quot;, &quot;target&quot;: &quot;aireports&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;openai&quot;, &quot;target&quot;: &quot;drupal&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;openssf&quot;, &quot;target&quot;: &quot;aireports&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;lf&quot;, &quot;target&quot;: &quot;openssf&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;lf&quot;, &quot;target&quot;: &quot;policy&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;policy&quot;, &quot;target&quot;: &quot;aireports&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;libreoffice&quot;, &quot;target&quot;: &quot;policy&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;libreoffice&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;sbom&quot;, &quot;target&quot;: &quot;enisa&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;enisa&quot;, &quot;target&quot;: &quot;cra&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;sbom&quot;, &quot;target&quot;: &quot;cra&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;awards&quot;, &quot;target&quot;: &quot;sbom&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;awards&quot;, &quot;target&quot;: &quot;mcp&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;awards&quot;, &quot;target&quot;: &quot;cicd&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;mcp&quot;, &quot;target&quot;: &quot;aaif&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;mcp&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;aaif&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;openai&quot;, &quot;target&quot;: &quot;aaif&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;lf&quot;, &quot;target&quot;: &quot;aaif&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;mcp&quot;, &quot;target&quot;: &quot;android&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;review&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;review&quot;, &quot;target&quot;: &quot;egm&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;egm&quot;, &quot;target&quot;: &quot;android&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;review&quot;, &quot;target&quot;: &quot;policy&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;review&quot;, &quot;target&quot;: &quot;aireports&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;android&quot;, &quot;target&quot;: &quot;anthropic&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;review&quot;, &quot;target&quot;: &quot;github&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;aiven&quot;, &quot;target&quot;: &quot;litellm&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;aiven&quot;, &quot;target&quot;: &quot;tokens&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;tokens&quot;, &quot;target&quot;: &quot;metric&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;amazon&quot;, &quot;target&quot;: &quot;metric&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;amazon&quot;, &quot;target&quot;: &quot;tokens&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;review&quot;, &quot;target&quot;: &quot;tokens&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;tokens&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;openai&quot;, &quot;target&quot;: &quot;tokens&quot;, &quot;weight&quot;: 2}]};\nconst TYPE_COLORS = {&quot;actor&quot;: &quot;#dc2626&quot;, &quot;malware&quot;: &quot;#991b1b&quot;, &quot;cve&quot;: &quot;#ea580c&quot;, &quot;product&quot;: &quot;#2563eb&quot;, &quot;vendor&quot;: &quot;#16a34a&quot;, &quot;researcher&quot;: &quot;#0d9488&quot;, &quot;person&quot;: &quot;#475569&quot;, &quot;location&quot;: &quot;#7c3aed&quot;, &quot;law&quot;: &quot;#ca8a04&quot;, &quot;campaign&quot;: &quot;#be185d&quot;, &quot;concept&quot;: &quot;#0891b2&quot;, &quot;standard&quot;: &quot;#64748b&quot;};\nconst TYPE_LABELS = {&quot;actor&quot;: &quot;Threat actor \/ APT&quot;, &quot;malware&quot;: &quot;Malware \/ worm&quot;, &quot;cve&quot;: &quot;CVE \/ vulnerability&quot;, &quot;product&quot;: &quot;Product \/ platform&quot;, &quot;vendor&quot;: &quot;Vendor \/ company&quot;, &quot;researcher&quot;: &quot;Researcher \/ source&quot;, &quot;person&quot;: &quot;Person&quot;, &quot;location&quot;: &quot;Country \/ region&quot;, &quot;law&quot;: &quot;Regulator \/ law enforcement&quot;, &quot;campaign&quot;: &quot;Campaign \/ event&quot;, &quot;concept&quot;: &quot;Theme \/ stat&quot;, &quot;standard&quot;: &quot;Standard \/ framework&quot;};\n\nconst wrap = document.getElementById(&#x27;canvas-wrap&#x27;);\nconst svg = d3.select(&#x27;#canvas&#x27;);\nlet width = wrap.clientWidth, height = wrap.clientHeight;\n\nconst g = svg.append(&#x27;g&#x27;);\n\nconst zoom = d3.zoom()\n  .scaleExtent([0.2, 6])\n  .on(&#x27;zoom&#x27;, (event) =&gt; g.attr(&#x27;transform&#x27;, event.transform));\nsvg.call(zoom);\n\ndocument.getElementById(&#x27;zoom-in&#x27;).onclick = () =&gt; svg.transition().duration(200).call(zoom.scaleBy, 1.3);\ndocument.getElementById(&#x27;zoom-out&#x27;).onclick = () =&gt; svg.transition().duration(200).call(zoom.scaleBy, 1\/1.3);\ndocument.getElementById(&#x27;zoom-reset&#x27;).onclick = () =&gt; svg.transition().duration(300).call(zoom.transform, d3.zoomIdentity);\n\nconst maxW = d3.max(DATA.nodes, d =&gt; d.weight) || 1;\nconst rScale = d3.scaleSqrt().domain([1, maxW]).range([8, 34]);\nconst maxEdgeW = d3.max(DATA.links, l =&gt; l.weight) || 1;\nconst edgeScale = d3.scaleLinear().domain([1, maxEdgeW]).range([1, 7]);\n\nconst simulation = d3.forceSimulation(DATA.nodes)\n  .force(&#x27;link&#x27;, d3.forceLink(DATA.links).id(d =&gt; d.id).distance(l =&gt; 90 + 10 * (5 - Math.min(l.weight,5))).strength(0.35))\n  .force(&#x27;charge&#x27;, d3.forceManyBody().strength(-420))\n  .force(&#x27;center&#x27;, d3.forceCenter(width \/ 2, height \/ 2))\n  .force(&#x27;collide&#x27;, d3.forceCollide(d =&gt; rScale(d.weight) + 18));\n\nconst link = g.append(&#x27;g&#x27;).attr(&#x27;class&#x27;, &#x27;links&#x27;)\n  .selectAll(&#x27;line&#x27;).data(DATA.links).join(&#x27;line&#x27;)\n  .attr(&#x27;class&#x27;, &#x27;link&#x27;)\n  .attr(&#x27;stroke-width&#x27;, d =&gt; edgeScale(d.weight));\n\nconst node = g.append(&#x27;g&#x27;).attr(&#x27;class&#x27;, &#x27;nodes&#x27;)\n  .selectAll(&#x27;circle&#x27;).data(DATA.nodes).join(&#x27;circle&#x27;)\n  .attr(&#x27;r&#x27;, d =&gt; rScale(d.weight))\n  .attr(&#x27;fill&#x27;, d =&gt; TYPE_COLORS[d.type] || &#x27;#64748b&#x27;)\n  .attr(&#x27;stroke&#x27;, &#x27;#ffffff&#x27;).attr(&#x27;stroke-width&#x27;, 1.5)\n  .style(&#x27;cursor&#x27;, &#x27;grab&#x27;)\n  .call(d3.drag()\n    .on(&#x27;start&#x27;, (event, d) =&gt; { if (!event.active) simulation.alphaTarget(0.2).restart(); d.fx = d.x; d.fy = d.y; })\n    .on(&#x27;drag&#x27;, (event, d) =&gt; { d.fx = event.x; d.fy = event.y; })\n    .on(&#x27;end&#x27;, (event, d) =&gt; { if (!event.active) simulation.alphaTarget(0); d.fx = null; d.fy = null; }));\n\nconst label = g.append(&#x27;g&#x27;).attr(&#x27;class&#x27;, &#x27;labels&#x27;)\n  .selectAll(&#x27;text&#x27;).data(DATA.nodes).join(&#x27;text&#x27;)\n  .attr(&#x27;class&#x27;, d =&gt; &#x27;node-label&#x27; + (d.weight &gt;= maxW * 0.7 ? &#x27; bold&#x27; : &#x27;&#x27;))\n  .attr(&#x27;dy&#x27;, d =&gt; -(rScale(d.weight) + 6))\n  .attr(&#x27;text-anchor&#x27;, &#x27;middle&#x27;)\n  .text(d =&gt; d.label);\n\nconst tooltip = d3.select(&#x27;#tooltip&#x27;);\nconst tooltipEl = document.getElementById(&#x27;tooltip&#x27;);\nlet hideTimer = null;\n\nfunction escapeHtml(s) {\n  return String(s).replace(\/&amp;\/g, &#x27;&amp;amp;&#x27;).replace(\/&lt;\/g, &#x27;&amp;lt;&#x27;).replace(\/&gt;\/g, &#x27;&amp;gt;&#x27;).replace(\/&quot;\/g, &#x27;&amp;quot;&#x27;);\n}\n\nfunction showTooltip(d) {\n  clearTimeout(hideTimer);\n  let html = &#x27;&lt;div class=&quot;tooltip-head&quot;&gt;&lt;strong&gt;&#x27; + escapeHtml(d.label) + &#x27;&lt;\/strong&gt;&lt;br&gt;&#x27; +\n    escapeHtml(TYPE_LABELS[d.type] || d.type) + &#x27; &amp;middot; &#x27; + d.weight + &#x27; mentions&lt;\/div&gt;&#x27;;\n  const articles = d.articles || [];\n  if (articles.length) {\n    html += &#x27;&lt;div class=&quot;tooltip-articles&quot;&gt;&lt;div class=&quot;tooltip-articles-title&quot;&gt;Related articles&lt;\/div&gt;&#x27; +\n      articles.map(a =&gt; &#x27;&lt;a href=&quot;&#x27; + escapeHtml(a.url) + &#x27;&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot;&gt;&#x27; + escapeHtml(a.title) + &#x27;&lt;\/a&gt;&#x27;).join(&#x27;&#x27;) +\n      &#x27;&lt;\/div&gt;&#x27;;\n  }\n  tooltip.style(&#x27;opacity&#x27;, 1).html(html);\n}\n\nfunction hideTooltipNow() {\n  tooltip.style(&#x27;opacity&#x27;, 0);\n}\n\n\/\/ Hide only when the cursor leaves the WHOLE graph area (canvas + tooltip),\n\/\/ not when it leaves a node&#x27;s small circular hit-area. A per-node mouseout with a\n\/\/ short timer is a race: if the cursor takes even slightly longer than the timer to\n\/\/ travel from the node&#x27;s edge to the tooltip (which can be tall, with a scrollable\n\/\/ article list), it disappears before a click can land. Binding to the wrap&#x27;s\n\/\/ mouseleave instead means the tooltip only closes when you actually leave the graph,\n\/\/ or immediately when you click empty canvas space, or updates in place when you move\n\/\/ to a different node -- all far more forgiving.\nwrap.addEventListener(&#x27;mouseleave&#x27;, hideTooltipNow);\n\nsvg.on(&#x27;click&#x27;, (event) =&gt; {\n  if (event.target === svg.node()) hideTooltipNow();\n});\n\nnode.on(&#x27;mouseover&#x27;, (event, d) =&gt; showTooltip(d))\n  .on(&#x27;mousemove&#x27;, (event) =&gt; {\n    const [mx, my] = d3.pointer(event, wrap);\n    let left = mx + 16, top = my + 8;\n    const maxLeft = wrap.clientWidth - 296, maxTop = wrap.clientHeight - 40;\n    if (left &gt; maxLeft) left = Math.max(8, mx - 296);\n    if (top &gt; maxTop) top = Math.max(8, maxTop);\n    tooltip.style(&#x27;left&#x27;, left + &#x27;px&#x27;).style(&#x27;top&#x27;, top + &#x27;px&#x27;);\n  });\n\nfunction renderPositions() {\n  link.attr(&#x27;x1&#x27;, d =&gt; d.source.x).attr(&#x27;y1&#x27;, d =&gt; d.source.y)\n      .attr(&#x27;x2&#x27;, d =&gt; d.target.x).attr(&#x27;y2&#x27;, d =&gt; d.target.y);\n  node.attr(&#x27;cx&#x27;, d =&gt; d.x).attr(&#x27;cy&#x27;, d =&gt; d.y);\n  label.attr(&#x27;x&#x27;, d =&gt; d.x).attr(&#x27;y&#x27;, d =&gt; d.y);\n}\n\n\/\/ Fit the whole graph inside the visible canvas (accounting for node radius and the\n\/\/ label sitting just above each node) by computing the bounding box of all node\n\/\/ positions and applying a translate+scale transform through the existing zoom\n\/\/ behavior. duration=0 applies it instantly (used on first paint); a duration applies\n\/\/ a smooth transition (used after a resize).\nfunction zoomToFit(duration) {\n  if (!DATA.nodes.length) return;\n  let minX = Infinity, maxX = -Infinity, minY = Infinity, maxY = -Infinity;\n  DATA.nodes.forEach(d =&gt; {\n    const r = rScale(d.weight);\n    minX = Math.min(minX, d.x - r);\n    maxX = Math.max(maxX, d.x + r);\n    minY = Math.min(minY, d.y - r - 24); \/\/ extra headroom for the label above the node\n    maxY = Math.max(maxY, d.y + r);\n  });\n  const graphW = maxX - minX, graphH = maxY - minY;\n  if (graphW &lt;= 0 || graphH &lt;= 0) return;\n  const fitFraction = 0.9; \/\/ leave a small margin so edge nodes\/labels aren&#x27;t flush against the frame\n  const scale = Math.max(0.2, Math.min(2, fitFraction \/ Math.max(graphW \/ width, graphH \/ height)));\n  const tx = width \/ 2 - scale * (minX + maxX) \/ 2;\n  const ty = height \/ 2 - scale * (minY + maxY) \/ 2;\n  const transform = d3.zoomIdentity.translate(tx, ty).scale(scale);\n  if (duration &gt; 0) {\n    svg.transition().duration(duration).call(zoom.transform, transform);\n  } else {\n    svg.call(zoom.transform, transform);\n  }\n}\n\n\/\/ Pre-settle the force layout synchronously (no on-screen animation) so the very\n\/\/ first paint already shows a converged graph that&#x27;s fully framed by zoomToFit,\n\/\/ instead of nodes flying in from D3&#x27;s random initial scatter with the view\n\/\/ potentially clipping some of them before things settle.\nconst PRESETTLE_TICKS = 300;\nsimulation.stop();\nfor (let i = 0; i &lt; PRESETTLE_TICKS; i++) simulation.tick();\nrenderPositions();\nzoomToFit(0);\n\nsimulation.on(&#x27;tick&#x27;, renderPositions);\n\n\/\/ Legend: only show entity types actually present in this map.\nconst typesPresent = Array.from(new Set(DATA.nodes.map(d =&gt; d.type)));\nconst legend = document.getElementById(&#x27;legend&#x27;);\nlegend.innerHTML = &#x27;&lt;div class=&quot;legend-title&quot;&gt;Entity types&lt;\/div&gt;&#x27; + typesPresent.map(t =&gt;\n  &#x27;&lt;div class=&quot;legend-row&quot;&gt;&lt;span class=&quot;legend-dot&quot; style=&quot;background:&#x27; + (TYPE_COLORS[t] || &#x27;#64748b&#x27;) + &#x27;&quot;&gt;&lt;\/span&gt;&#x27; + (TYPE_LABELS[t] || t) + &#x27;&lt;\/div&gt;&#x27;\n).join(&#x27;&#x27;);\n\nwindow.addEventListener(&#x27;resize&#x27;, () =&gt; {\n  width = wrap.clientWidth; height = wrap.clientHeight;\n  simulation.force(&#x27;center&#x27;, d3.forceCenter(width \/ 2, height \/ 2));\n  simulation.alpha(0.3).restart();\n  zoomToFit(400);\n});\n&lt;\/script&gt;\n&lt;\/body&gt;\n&lt;\/html&gt;\n\" style=\"width:100%;height:82vh;min-height:600px;border:1px solid #e2e8f0;border-radius:8px;\" title=\"Interactive topic map\"><\/iframe><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,11],"tags":[],"class_list":["post-6201","post","type-post","status-publish","format-standard","hentry","category-secure","category-trends"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6201"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6201\/revisions"}],"predecessor-version":[{"id":6217,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6201\/revisions\/6217"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}