
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@easterngraphics/wcf
Advanced tools
W-CF stands for Web Configuration Framework and is a JavaScript framework for 3D product configuration. It consists of several ES6 JavaScript modules.
W-CF stands for Web Configuration Framework and is a JavaScript framework for 3D product configuration. It consists of several ES6 JavaScript modules.
The modules are categorized and structured into several folders. They can be found in the modules
folder of the W-CF distribution. These are the main module folders:
bsk
: wrapper for the EAIWS basket functionality to manage an article listcf
: tools and functions for OFML article configuration using the EAIWScore
: core functionality for the W-CF framework (e.g. the 3D view, tools, commands)eaiws
: JavaScript wrapper for the SOAP-Api of the EAIWSpl
: tools and functions for space planningpolyfill
: optional browser polyfillsutils
: a collection of utility functions and classes for the W-CF frameworkTo use the modules you have to install them using npm
. For correct installation of all dependencies version 7+ of npm
is required.
Please use the following command for the installation: npm i @easterngraphics/wcf
After the installation the modules can be imported from @easterngraphics/wcf/modules/...
. Example:
import { EaiwsSession } from "@easterngraphics/wcf/modules/eaiws";
It is also recommended to setup a build task to copy the W-CF resources (styles, data) from node_modules/@easterngraphics/wcf/
to your distribution directory.
wcfConfig
is a global object which is used to configure different parts of W-CF.
To support loading of resources on demand the dataPath
has to be defined at the start of the application. Example:
import { wcfConfig } from "@easterngraphics/wcf/modules/utils";
wcfConfig.dataPath = "wcf/data/";
W-CF provides a core-js
based polyfill of stable ES and web standards for the last 3 browser versions.
If your build environment (e.g. Babel) does not already provide polyfills it is recommended to import it
as your first import in your application to get the best compatibility with different browsers and versions.
import "@easterngraphics/wcf/modules/polyfill/core-js";
Additionally you need to add core-js
to the dependencies in your package.json.
{
...
"dependencies": {
...
"core-js": "^3.37.1"
}
}
If you are currently using a non-module W-CF (version < 8.0.0) you will have to migrate to modules if you want to use the latest W-CF version. If your application itself is not module based you should consider to switch to modules. If this is not an option you have to build your own bundle of W-CF.
Here are the basic steps in order to use the W-CF modules
npm i @easterngraphics/wcf
.d.ts
files from your tsconfig.json
node_modules/@easterngraphics/wcf/
to your distribution directoryIf you want to have a minimal bundle size and you are importing classes from BabylonJs there some rules:
import { Vector3 } from "@babylonjs/core";
Correct: import { Vector3 } from "@babylonjs/core/Maths/math.vector";
MeshBuilder
class. Using this class will bundle all "builders" to your code. You should import only the functions you need from @babylonjs/core/Meshes/Builders
.
e.g.: import { CreatePlane } from "@babylonjs/core/Meshes/Builders/planeBuilder";
More information about this topic can be found here: https://doc.babylonjs.com/divingDeeper/developWithBjs/treeShaking#tree-shaking
Type 'Timeout' is not assignable to type 'number'.
you are perhaps importing jszip
in your project. JSZip is globally loading the node
types and this generates a conflict with the setTimeout()
function. To solve this issue you should call window.setTimeout()
instead of just setTimeout()
.© EasternGraphics GmbH | Albert-Einstein-Straße 1 | 98693 Ilmenau | GERMANY
This work (whether as text, file, book or in other form) is copyright. All rights are reserved by EasternGraphics GmbH. Translation, reproduction or distribution of the whole or parts thereof is permitted only with the prior agreement in writing of EasternGraphics GmbH.
EasternGraphics GmbH accepts no liability for the completeness, freedom from errors, topicality or continuity of this work or for its suitability to the intended purposes of the user. All liability except in the case of malicious intent, gross negligence or harm to life and limb is excluded.
All names or descriptions contained in this work may be the trademarks of the relevant copyright owner and as such legally protected. The fact that such trademarks appear in this work entitles no-one to assume that they are for the free use of all and sundry.
FAQs
W-CF stands for Web Configuration Framework and is a JavaScript framework for 3D product configuration. It consists of several ES6 JavaScript modules.
The npm package @easterngraphics/wcf receives a total of 292 weekly downloads. As such, @easterngraphics/wcf popularity was classified as not popular.
We found that @easterngraphics/wcf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.