
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@nibble-4bits/stockfish-native
Advanced tools
UCI interface for native Stockfish
npm install stockfish-native
Download or build the Stockfish engine from source. If necessary, mark the binary as executable.
stockfish-native provides methods thinly wrapping the UCI commands supported by the stockfish engine.
For better type checking, the results and options are explicitly typed and parsed instead unlike the strings UCI operates on.
Most operations are asynchronous and return a promise. If a command is send before the previous command has been returned, it will be queued and run after the previous commands complete.
import Stockfish from "stockfish-native";
const engine = new Stockfish("/path/to/engine", options);
Spawns the engine, and any sets the provided UCI options.
type StockfishOptions = Partial<{
"Debug Log File": string;
Contempt: number;
"Analysis Contempt": "Both" | "Off" | "White" | "Black" | "Both";
Threads: number;
Hash: number;
Ponder: boolean;
MultiPV: number;
"Skill Level": number;
"Move Overhead": number;
"Minimum Thinking Time": number;
"Slow Mover": number;
nodestime: number;
UCI_Chess960: boolean;
UCI_AnalyseMode: boolean;
UCI_LimitStrength: boolean;
UCI_Elo: number;
SyzygyPath: string;
SyzygyProbeDepth: number;
Syzygy50MoveRule: boolean;
SyzygyProbeLimit: number;
}>;
const bestMove = await engine.search(options);
Search for the best move from the current position.
Note: If the infinite option is passed, searching will continue until engine.stop() is called.
type SearchOptions = Partial<{
depth: number;
wtime: number;
btime: number;
winc: number;
binc: number;
movestogo: number;
nodes: number;
mate: number;
movetime: number;
infinite: boolean;
ponder: boolean;
searchmoves: string[];
}>;
const { score, detailed } = await engine.eval();
Get the score and detailed evaluation for the current position.
engine.position(position);
Set the position used by eval and search.
interface Position {
start: string; // "startpos" for the starting board or a FEN string. default: "startpos"
moves: string[]; // moves in long algebraic notation. omit to just use the start position
}
await engine.newgame();
await engine.position(); // reset to start position
await engine.quit();
Quits the engine after all previous commands have finished.
engine.kill();
Immediately kill the engine.
Note: If there are active commands they will not resolve.
stockfish-native is written in TypeScript - no types install!
In the project directory, you can run:
npm run buildBuilds the package using typescript into ./lib
npm testLaunches the Jest to run tests.
npm run lintChecks code for style issues and syntax errors with TSLint and Prettier.
npm run lint:fixChecks code for style issues and syntax errors with TSLint and Prettier, attempting to fix them when possible.
Travis is configured to run deploys on tags.
FAQs
UCI interface for native Stockfish
We found that @nibble-4bits/stockfish-native demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.