
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@flighthq/binpack
Advanced tools
2D rectangle bin-packing — MaxRects placement with padding/border, optional power-of-two/square/rotation, and a fixed or growable bin; plain-data rectangles in, placements + used extent + unpacked out
2D rectangle bin-packing — MaxRects placement with padding/border, optional power-of-two/square/rotation, and a fixed or growable bin; plain-data rectangles in, placements + used extent + unpacked out
npm install @flighthq/binpack
Import the supported application-facing API from @flighthq/binpack. The @flighthq/binpack/contract export is the wider package-to-package contract used to compose Flight itself.
This package is part of the locked-version Flight SDK graph. Applications may instead install and import @flighthq/sdk when package-level tree shaking is sufficient.
FAQs
2D rectangle bin-packing — MaxRects placement with padding/border, optional power-of-two/square/rotation, and a fixed or growable bin; plain-data rectangles in, placements + used extent + unpacked out
The npm package @flighthq/binpack receives a total of 0 weekly downloads. As such, @flighthq/binpack popularity was classified as not popular.
We found that @flighthq/binpack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.