
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
@goodgamestudios/cxf-runtime
Advanced tools
The Client Extension Framework enables developers to add functionality to exisiting Goodgame Games while they are running. It exposes an extremely lightweight API that provides the fundamental services for your Client Extension to interact with a game client.
Developers cans
Each game is embedded in a so-called Game Integration Page. That’s a GGS-maintained HTML page that loads the Flash client as an SWFObject or an iframe in the case of HTML5 client.
CXF is shipped as an npm package. As such, it can easily and safely be embedded from one of the many public CDNs.
jsDelivr is a public, open-source CDN (Content Delivery Network) developed by ProspectOne, focused on performance, reliability, and security. It is free to use for everyone, with no bandwidth limits.
jsDelivr has continuously demonstrated >99% uptime, ranking #1 amongst strong contenders like Cloudflare, Google Cloud, Akamai, AWS Cloudfront.
<script src="https://cdn.jsdelivr.net/npm/@goodgamestudios/cxf-runtime@1/dist/cxf.min.js"></script>
<script>
tags)HTML can be inserted, but keep in mind that almost all browsers will not execute injected <script>
tags for security reasons.
This is likey the primary method of adding your code.
Any other links will be inserted as iFrames and displayed immediately as a full-size overlay.
⚠️ CXF Runtime currently loads a list of plugins from a location set at build time. See the
CXF_PLUGINS_URL
environment variable.
CXF Runtime loads a list of plugins from CXF_PLUGINS_URL
. This must be an array of strings, where each string is one of the supported Content Types.
Here’s an example:
[
"<h1>Hello, world!</h1>",
"https://jsdelivr.com/path/to/my/plugin.js",
"https://obamaself.com/"
]
The build process uses parcel.
Parcel sets the process.env.NODE_ENV
variable depending on the build type.
npm run dev
npm test
xo
babel
To build:
npm run build
To publish a new version:
npm run release
xo
for lintingnyc
for coverageava
for unit testingparcel
to build & bundlestandard-version
to bump version & publish to npmFAQs
Client Extension Framework Runtime
The npm package @goodgamestudios/cxf-runtime receives a total of 41 weekly downloads. As such, @goodgamestudios/cxf-runtime popularity was classified as not popular.
We found that @goodgamestudios/cxf-runtime demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 20 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.