
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@file-viewer/renderer-3d
Advanced tools
Standalone 3D model renderer plugin for File Viewer powered by Three.js loaders and OrbitControls.
Flyfish File Viewer 的独立 3D 模型 renderer。它使用 Three.js、OrbitControls 和按格式异步加载的 loader,在浏览器内预览 GLB / GLTF、OBJ、STL、PLY、FBX、DAE、3DS、3MF、AMF、USD、KMZ、PCD、VRML、XYZ、VTK 等模型;STEP / STP、IGES / IGS 和 BREP 则通过本地 OCCT Worker 完成真实几何解析和渲染。
import FileViewer from '@file-viewer/vue3'
import { modelRenderer } from '@file-viewer/renderer-3d'
const options = {
rendererMode: 'replace',
renderers: modelRenderer,
model: {
workerUrl: '/viewer-assets/wasm/model/occt-worker.js',
runtimeUrl: '/viewer-assets/wasm/model/occt-import-js.js',
wasmUrl: '/viewer-assets/wasm/model/occt-import-js.wasm',
workerTimeoutMs: 120_000,
},
}
也可以把 modelRenderer 与 CAD 等 renderer 组合,或直接使用已经聚合它的 @file-viewer/preset-all。full 包和 @file-viewer/vite-plugin 会准备默认离线资产;只安装 renderer 时,需要自行托管 OCCT Worker、runtime、WASM 和两个许可证文件。
默认路径为:
wasm/model/occt-worker.jswasm/model/occt-import-js.jswasm/model/occt-import-js.wasm部署在子路径或独立资产域名时,通过 options.model.workerUrl、runtimeUrl、wasmUrl 传入最终 URL。不要使用运行时 CDN 回退。严格 CSP 需要在 worker-src、script-src 和 connect-src 中允许对应来源;部分浏览器还需要 script-src 'wasm-unsafe-eval'。
occt-import-js / OpenCascade 三角化,保留装配层级、实例、法线和面颜色,再构建 Three.js 场景。gltf / dae / fbx 的外部贴图或二进制资源继续以原始 url 目录为基准加载。web-ifc / That Open 与 rhino3dm,不会显示成成功预览。@file-viewer/core 不内置 Three.js 或几何内核。需要模型预览时请显式安装本包、相应 preset,或 full 包。FAQs
Standalone 3D model renderer plugin for File Viewer powered by Three.js loaders and OrbitControls.
The npm package @file-viewer/renderer-3d receives a total of 2,200 weekly downloads. As such, @file-viewer/renderer-3d popularity was classified as popular.
We found that @file-viewer/renderer-3d demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.