
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
@idosgames/module-sdk
Advanced tools
The composable-module contract for the iDosGames host shell: Module / ModuleContext types plus tiny authoring helpers. Framework-neutral at runtime — a module can be a game (Three/Phaser), a plain app, or an AI app.
The composable-module contract for the iDosGames host shell. A module is a self-contained
feature — a game (Three/Phaser), a plain app, or an AI app — that plugs into the host: it declares a
Module manifest and, in setup(ctx), registers what it contributes (a rendered EngineScene,
React UiPanels, a nav route). Framework-neutral at runtime — React and @idosgames/core are
referenced as types only, so a renderer-less module pulls in neither.
import { defineModule } from "@idosgames/module-sdk";
export const myModule = defineModule({
id: "my-game",
meta: { name: "My Game", type: "game", genre: "arcade", engine: "three" },
setup(ctx) {
ctx.registerScene(scene); // mount/activate/suspend/destroy
ctx.registerPanel(panel); // React UI in a host slot
ctx.registerRoute({ id: "my-game", label: "Play", icon: "🎮" });
},
});
Key types: Module, ModuleContext, EngineScene, SceneMountContext, UiPanel, SurfaceAllocator,
RouteEntry, SharedEventBus. The host runtime is @idosgames/app-shell;
shared React glue is @idosgames/react.
See the full design in docs/composable-modules-architecture.md, or load the idosgames-module-contract
skill (via the @idosgames/mcp server).
FAQs
The composable-module contract for the iDosGames host shell: Module / ModuleContext types plus tiny authoring helpers. Framework-neutral at runtime — a module can be a game (Three/Phaser), a plain app, or an AI app.
We found that @idosgames/module-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.