
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@mixer/cdk-std
Advanced tools
The cdk-std
is the standard library for development with Mixer Interactive controls. It provides foundational functionality to communicate from your controls to the Mixer webpage. If you're using the Preact starter, this library is already largely wrapped up for you. If you're using the HTML starter code, you'll be dealing with this more directly.
API documentation is available here.
We recommend importing this script through our CDN by adding a script tag in the <head>
of your webpage:
<script src="https://mixercc.azureedge.net/lib/std-v0.2.js"></script>
After importing it, mixer
will be available as a global variable in your code. To send input, for example, you can call:
document.getElementById('hello-world').onclick = function(event) {
mixer.socket.call('giveInput', {
controlID: 'hello-world',
event: 'click',
button: event.button,
});
};
For more information, head to our developer site!
For security reasons, all custom control code you write runs in a sandboxes iframe in the Mixer page. However, there's information we want to tell you about, such as the data coming down the Interactive websocket, the position of the video, and so on and so forth. This package provides a bridge and pleasant wrappers over postMessage, the protocol that allows that to happen.
│
┌──────────────┐ ┌──────────────┐
│Mixer webpage │ │ │ Your Custom │
│ or app │ │ Controls │
│ ┌──┴───┴───┴──┐ │
│ ◀─┤ cdk-std ├─▶ │
│ └──┬───┬───┬──┘ │
└──────────────┘ └──────────────┘
│
Frame boundary
FAQs
Standard library for Mixer Interactive controls
The npm package @mixer/cdk-std receives a total of 0 weekly downloads. As such, @mixer/cdk-std popularity was classified as not popular.
We found that @mixer/cdk-std demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.