
Product
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies
A safer, faster way to eliminate vulnerabilities without updating dependencies
@dimforge/rapier2d
Advanced tools
2D physics engine for the JavaScript programming language (official bindings).
Multiple NPM packages exist for Rapier, depending on your needs:
@dimforge/rapier2d or
@dimforge/rapier3d:
The main build of the Rapier physics engine for 2D or 3D physics simulation. This should have wide browser
support while offering great performances. This does not guarantee cross-platform determinism of the physics
simulation (but it is still locally deterministic, on the same machine).@dimforge/rapier2d-simd or
@dimforge/rapier3d-simd:
A build with internal SIMD optimizations enabled. More limited browser support (requires support for simd128).@dimforge/rapier2d-deterministic or
@dimforge/rapier3d-deterministic:
A less optimized build but with a guarantee of a cross-platform deterministic execution of the physics simulation.Some bundlers will struggle with the .wasm file package into the builds above. Alternative -compat versions exist
which embed the .wasm file into the .js sources encoded with base64. This results in a bigger package size, but
much wider bundler support.
Just append -compat to the build you are interested in:
rapier2d-compat,
rapier2d-simd-compat,
rapier2d-deterministic-compat,
rapier3d-compat,
rapier3d-simd-compat,
rapier3d-deterministic-compat.
Each time a new Pull Request is merged to the main branch of the rapier.js repository,
an automatic canary build is triggered. Builds published to npmjs under the canary tag does not come with any
stability guarantee and does not follow semver versioning. But it can be a useful solution to try out the latest
features until a proper release is cut.
FAQs
2-dimensional physics engine in Rust - official JS bindings.
We found that @dimforge/rapier2d demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies

Product
Reachability analysis for Ruby is now in beta, helping teams identify which vulnerabilities are truly exploitable in their applications.

Research
/Security News
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.