
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
@foxglove/ros2
Advanced tools
Standalone TypeScript implementation of the ROS 2 protocol built on @foxglove/rtps
Standalone TypeScript implementation of the ROS 2 protocol built on @foxglove/rtps
A simple listener that is compatible with the ROS 2 "talker" example application.
import { parse as parseMsgDef } from "@foxglove/rosmsg";
import { toString as timeString } from "@foxglove/rostime";
import { RosNode } from "@foxglove/ros2";
import { getNetworkInterfaces, UdpSocketNode } from "@foxglove/ros2/nodejs";
async function main() {
const ros = new RosNode({
name: "listener",
udpSocketCreate: UdpSocketNode.Create,
getNetworkInterfaces,
// log: console, // Enable this for verbose console debugging
});
await ros.start();
// Create a message definition for the std_msgs/msg/String type
const msgDefinition = parseMsgDef("string data", { ros2: true });
// Subscribe to the /chatter topic
const subscription = ros.subscribe({
topic: "/chatter",
dataType: "std_msgs/msg/String",
msgDefinition,
});
subscription.on("message", (timestamp, msg, _data, _publisher) => {
const strMsg = msg as { data: string };
console.log(`[INFO] [${timeString(timestamp)}] [listener]: I heard: [${strMsg.data}]`);
});
// Listen for Ctrl+C to stop
process.on("SIGINT", () => void shutdown(ros));
// Wait for Ctrl+C
process.stdin.resume();
}
async function shutdown(ros: RosNode) {
await ros.shutdown();
process.exit();
}
void main();
Receiving large (>256KB) messages not be possible with the default Linux networking receive buffer size of 256KB, depending on CPU speed / contention / network speed / many factors. Linux users should set the following sysctls:
sudo sysctl -w net.core.rmem_max=26214400
sudo sysctl -w net.core.rmem_default=26214400
sudo sysctl -w net.ipv4.udp_mem=26214400
Or permanently in /etc/sysctl.conf:
net.core.rmem_max=26214400
net.core.rmem_default=26214400
net.ipv4.udp_mem=26214400
yarn test
@foxglove/ros2 is licensed under MIT License.
yarn version --[major|minor|patch] to bump versiongit push && git push --tags to push new tagFAQs
Standalone TypeScript implementation of the ROS 2 protocol built on @foxglove/rtps
The npm package @foxglove/ros2 receives a total of 16 weekly downloads. As such, @foxglove/ros2 popularity was classified as not popular.
We found that @foxglove/ros2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Security News
TypeScript 6.0 will be the last JavaScript-based major release, as the project shifts to the TypeScript 7 native toolchain with major build speedups.