
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@novastar/codec
Advanced tools
Core API for communication with devices using NovaStar protocol.
Go to API documentation.
Using npm:
npm install --save @novastar/codec@next
or yarn:
yarn add @novastar/codec@next
import { connect, Socket } from 'net';
import SerialPort from 'serialport';
import { Request, Connection, DeviceType } from '@novastar/codec';
let connection;
// TCP socket
const socket = connect(5200, () => {
connection = new Connection(socket);
})
// Serial port
const port = new SerialPort('COM11', { baudRate: 115200 }, () => {
connection = new Connection(port);
})
It is recommended to use packages @novastar/serial and @novastar/net. They will contain helper methods to find connected devices
// Create a request to read a single byte
const readReq = new Request(1);
readReq.deviceType = DeviceType.ReceivingCard;
readReq.address = 0x02000001;
readReq.port = 0;
const { data: [value] } = await connection.send(readReq);
console.log(`Brightness on the first receiving card connected to 0 port is ${value}`);
// And this way you can write data to the device
const writeReq = new Request([255]);
writeReq.deviceType = DeviceType.ReceivingCard;
writeReq.address = 0x02000001;
await connection.send(writeReq);
import { Session } from '@novastar/codec';
import '@novastar/native/build/main/generated/api/ReadGlobalBrightness';
import '@novastar/native/build/main/generated/api/SetGlobalBrightness';
const session = new Session(connection);
const screenIndex = 0;
const portIndex = 0;
const receivingCardIndex = 0;
// If `broadcast` is `true`, then there is no need to wait for an answer.
const broadcast = false;
const newBrightness = 255;
const currentBrightness = await session.ReadGlobalBrightness(screenIndex, portIndex, receivingCardIndex);
await session.SetGlobalBrightness(screenIndex, portIndex, receivingCardIndex, broadcast, newBrightness);
connection.close() // or session.close()
FAQs
Core API for communication with devices using NovaStar protocol
We found that @novastar/codec demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.