
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@file-viewer/renderer-3d
Advanced tools
Standalone 3D model renderer plugin for File Viewer powered by Three.js loaders and OrbitControls.
Flyfish File Viewer 的独立 3D 模型 renderer。它使用 Three.js、OrbitControls 和按格式异步加载的 loader,在浏览器内预览 GLB / GLTF、OBJ、STL、PLY、FBX、DAE、3DS、3MF、AMF、USD、KMZ、PCD、VRML、XYZ、VTK 等模型;STEP / STP、IGES / IGS 和 BREP 则通过本地 OCCT Worker 完成真实几何解析和渲染。
import FileViewer from '@file-viewer/vue3'
import { modelRenderer } from '@file-viewer/renderer-3d'
const options = {
rendererMode: 'replace',
renderers: modelRenderer,
model: {
workerUrl: '/viewer-assets/wasm/model/occt-worker.js',
runtimeUrl: '/viewer-assets/wasm/model/occt-import-js.js',
wasmUrl: '/viewer-assets/wasm/model/occt-import-js.wasm',
workerTimeoutMs: 120_000,
},
}
也可以把 modelRenderer 与 CAD 等 renderer 组合,或直接使用已经聚合它的 @file-viewer/preset-all。full 包和 @file-viewer/vite-plugin 会准备默认离线资产;只安装 renderer 时,需要自行托管 OCCT Worker、runtime、WASM 和两个许可证文件。
默认路径为:
wasm/model/occt-worker.jswasm/model/occt-import-js.jswasm/model/occt-import-js.wasm部署在子路径或独立资产域名时,通过 options.model.workerUrl、runtimeUrl、wasmUrl 传入最终 URL。不要使用运行时 CDN 回退。严格 CSP 需要在 worker-src、script-src 和 connect-src 中允许对应来源;部分浏览器还需要 script-src 'wasm-unsafe-eval'。
occt-import-js / OpenCascade 三角化,保留装配层级、实例、法线和面颜色,再构建 Three.js 场景。gltf / dae / fbx 的外部贴图或二进制资源继续以原始 url 目录为基准加载。web-ifc / That Open 与 rhino3dm,不会显示成成功预览。@file-viewer/core 不内置 Three.js 或几何内核。需要模型预览时请显式安装本包、相应 preset,或 full 包。FAQs
Standalone 3D model renderer plugin for File Viewer powered by Three.js loaders and OrbitControls.
The npm package @file-viewer/renderer-3d receives a total of 5,811 weekly downloads. As such, @file-viewer/renderer-3d popularity was classified as popular.
We found that @file-viewer/renderer-3d demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.