
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@bwland/sdk
Advanced tools
The bw.land SDK is a lightweight 3D metaverse engine that empowers developers and creators to build immersive virtual experiences. This is the same technology that powered the McDonald's My Happy Place campaign in June 2024.
With this SDK, you can:
The SDK abstracts away complex technical challenges, allowing creators to concentrate on designing engaging experiences for their users.
Below is a basic example of how to initialize and configure the bw.land SDK in your web application:
// Define the canvas ID where the 3D world will be rendered
const bwlandCanvasId = "bwland-canvas";
// Add event listener to prevent default space key action on the canvas
window.addEventListener("keydown", function (e) {
// Get canvas child element in root element
// If the key is space and the target is the canvas element
// Prevent the default action
var canvas = document.getElementById(bwlandCanvasId).querySelectorAll("canvas")[0];
if (e.keyCode == 32 && e.target === canvas) {
e.preventDefault();
}
});
// Initialize the SDK when the DOM content is loaded
window.addEventListener("DOMContentLoaded", (event) => {
// Get the BWLand object from the window
const { BWLand } = window["bwland"];
// Configure your virtual world
const config = {
id: "myspace", // Unique identifier for your world
name: "My Space", // Name of your virtual world
cover: "", // Cover image URL (optional)
world: {}, // World configuration
author: { // Author information
id: "1",
name: "Bandwagon Labs",
username: "bandwagonlabs",
email: "hello@anyone.com",
image: "/images/bw_author_image.jpg",
},
spawnPosition: { x: 19, y: 14, z: 13 }, // Starting position for users
worldFeatures: { // Enable/disable features
nameLabel: true, // Show user names
chat: true, // Enable chat functionality
emotions: true, // Enable emotions/emotes
},
assetUrl: 'https://cdn.bw.land/spaces/beach-quest/scene', // URL for 3D assets
imagesUrl: 'https://cdn.bw.land/spaces/beach-quest/images', // URL for images
mediaUrl: 'https://cdn.bw.land/spaces/beach-quest/media', // URL for media files
excludeWearables: [], // Wearables to exclude
assets: { // Custom assets configuration
levelGltfUrlsWithFeatures: {
BeachQuest_Bush1: {
// Asset-specific configuration
}
}
}
};
// Initialize the BWLand SDK with your configuration
const bwland = new BWLand(config);
// Additional initialization code can go here
});
Ensure you have a canvas element in your HTML:
<div id="bwland-canvas" style="width: 100%; height: 100vh;"></div>
Include the SDK in your HTML:
<script src="https://cdn.bw.land/sdk/latest/main.js"></script>
Please refer to this (link)[https://www.w3resource.com/yarn/yarn-version-and-yarn-versions-cli-commands.php] for versioning.
// increment major version
yarn version --major
// increment minor version
yarn version --minor
// increment patch version
yarn version --patch
Follow the MAJOR.MINOR.PATCH format:
During the alpha stage, append a pre-release identifier like -alpha.X to indicate that the software is in an experimental phase.
0.1.0-alpha.1 (First alpha release)0.1.0-alpha.2 (Second alpha release with changes)0.1.0 (Stable release for the first version)0.x.x for Alpha/Beta Versions0 as the major version indicates that the software is still in early development and subject to changes.Use alpha, beta, rc (release candidate), etc., to clarify the release stage.
0.1.0-alpha.10.1.0-beta.11.0.0-rc.1When moving from one stage to another (e.g., alpha to beta), reset the pre-release number.
0.1.0-alpha.5 → 0.1.0-beta.1yarn buildThis build method creates a complete package with ESM, CommonJS, and TypeScript type definitions:
$ yarn build
yarn build:webpackThis build method creates a webpack bundle optimized for deployment:
$ yarn build:webpack
cd to the dist directory:$ cd dist
for file in $(find . -name "*.js"); do gzip -9 "$file" && mv "$file.gz" "${file%.js}.js"; done
aws s3 cp . s3://cdn.bw.land/sdk/$(yarn --version)/ --recursive --exclude "*" --include "*.js" --acl public-read --content-type "application/javascript" --content-encoding "gzip"
FAQs
## Introduction
We found that @bwland/sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.