
Security News
Composer 2.11 Adds Dependency Cooldowns
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.
@rive-app/webgl2
Advanced tools
Rive’s browser runtime using the Canvas rendering path. It offers similar Rive-file, animation, and state-machine workflows; the main distinction is the rendering backend rather than the authoring format or interaction model.
Another Rive browser runtime using WebGL. It provides similar animation and interaction capabilities, but targets WebGL rather than specifically requiring a WebGL2 rendering path.
A browser player for Lottie animations, commonly exported from After Effects. Like Rive, it renders vector-based motion in web pages, but Rive’s runtime is especially oriented toward interactive state machines; Lottie commonly plays exported animation timelines.
A web player for .lottie and Lottie animations, with browser rendering and playback controls. It serves a similar purpose for web animation, but uses the Lottie format and does not provide Rive’s native state-machine workflow.
FAQs
Rive's webgl2 based web api.
The npm package @rive-app/webgl2 receives a total of 0 weekly downloads. As such, @rive-app/webgl2 popularity was classified as not popular.
We found that @rive-app/webgl2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.

Threat Research
/Security News
Cursor removed a malicious Claude Code 2.1.313 extension from its marketplace. Socket examines registry records and the initial claims about its distribution.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.