
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@lattice-engine/physics
Advanced tools
Physics using Rapier.
A rigidbody is a component that allows an entity to be affected by physics. It can be attached to an entity in the scene that has a Transform component.
StaticBody - a body that does not moveDynamicBody - a body that is affected by forces, such as gravityKinematicBody - a velocity-based body that is not affected by forcesOptionally, a TargetTransform component can be attached to a rigidbody. This will automatically smooth the rigidbody's position and rotation between physics steps. Any changes to the rigidbody's position or rotation should be done through the TargetTransform component.
One or more colliders can be attached to a rigidbody. For a single collider, the collider component can be attached directly to the rigidbody entity. For multiple colliders, each collider should be attached to a separate entity, and use the Parent component to attach to the rigidbody entity.
BoxCollider - a box colliderCapsuleCollider - a capsule colliderCylinderCollider - a cylinder colliderHullCollider - a convex hull colliderMeshCollider - a mesh colliderSphereCollider - a sphere colliderFAQs
Physics using [Rapier](https://rapier.rs/).
The npm package @lattice-engine/physics receives a total of 0 weekly downloads. As such, @lattice-engine/physics popularity was classified as not popular.
We found that @lattice-engine/physics demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.