
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@plasius/gpu-xr
Advanced tools
Framework-agnostic WebXR session management for Plasius GPU rendering projects.
Framework-agnostic WebXR session management for Plasius GPU rendering projects. This package isolates VR session lifecycle and capability probing so app layers can replace Three.js and still keep immersive workflows.
Apache-2.0. ESM + CJS builds.
npm install @plasius/gpu-xr
import { createXrManager } from "@plasius/gpu-xr";
const xr = createXrManager();
await xr.probeSupport(["immersive-vr"]);
const session = await xr.enterVr({
optionalFeatures: ["depth-sensing", "layers"],
});
// ... bind WebGPU render state to the session ...
await xr.exitSession();
@plasius/gpu-xr now exposes XR runtime frame-rate hints so
@plasius/gpu-performance can negotiate platform-native frame targets while
@plasius/gpu-renderer and @plasius/gpu-worker stay aligned on the xr
worker budget profile.
import { createXrManager } from "@plasius/gpu-xr";
const xr = createXrManager();
await xr.enterVr();
const hint = xr.getPerformanceHint({ preferredFrameRates: [90, 72] });
console.log(hint.targetFrameRate, hint.workerBudget);
await xr.setTargetFrameRate(hint.targetFrameRate);
isXrModeSupported(mode, options)requestXrSession(options)readXrFrameRateCapabilities(session, options)createXrPerformanceHint(options)updateXrTargetFrameRate(session, frameRate)createXrStore(initialState)createXrManager(options)mergeXrSessionInit(base, override)defaultVrSessionInitxrWorkerQueueClassxrWorkerSchedulerModedefaultXrWorkerBudgetProfileRun the demo server from the repo root:
cd gpu-xr
npm run demo
Then open http://localhost:8000/gpu-xr/demo/.
The demo mounts the shared @plasius/gpu-shared 3D harbor surface and keeps XR
capability, target mode, and worker-budget negotiation visible in context. It
stays browser-safe by rendering on the shared scene while @plasius/gpu-xr
continues to own XR support probing, frame-target hints, and session metadata
instead of a package-local renderer copy.
npm run lint
npm run typecheck
npm run test:coverage
npm run build
npm run pack:check
src/index.js: XR runtime/session manager and store.src/index.d.ts: public API typings.tests/package.test.js: Unit tests for support probing and lifecycle handling.docs/adrs/*: XR architecture decisions.docs/tdrs/*: XR technical direction records.docs/design/*: XR integration design notes.FAQs
Framework-agnostic WebXR session management for Plasius GPU rendering projects.
The npm package @plasius/gpu-xr receives a total of 11 weekly downloads. As such, @plasius/gpu-xr popularity was classified as not popular.
We found that @plasius/gpu-xr demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.