Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@shapediver/viewer.settings
Advanced tools
This package is part of the [`@shapediver/viewer`](https://www.npmjs.com/package/@shapediver/viewer), you can find all information [here](https://viewer.shapediver.com/v3/latest/api/index.html).
@shapediver/viewer.settings
This package is part of the @shapediver/viewer
, you can find all information here.
This package contains the definition for various versions of the ShapeDiver Viewer settings. Additionally, it contains functionality for validation and conversion.
npm install @shapediver/viewer.settings
import { validate } from '@shapediver/viewer.settings';
// validate with the default object of the settings v3, this will not throw an error
const defaultsV3 = DefaultsV3();
// this will attempt to extract the version from the object
validate(defaultsV3)
// with a specified version
validate(defaultsV3, '3.0')
// validate with an invalid object - this will throw an error
try{
const notAValidSettingsObject = {
maliciousFunction: () => { console.log('I am bad!') }
}
validate(notAValidSettingsObject)
} catch (e) {
// process the error
}
import { convert } from '@shapediver/viewer.settings';
// convert to a different version
const defaultsV3 = DefaultsV3();
const convertedV2 = convert(defaultsV3, '2.0')
const convertedV1 = convert(defaultsV3, '1.0')
import { evaluateSettingsVersion } from '@shapediver/viewer.settings';
// get the target versions
const targetVersion1 = evaluateSettingsVersion('1.1000.0'); // results in '1.0'
const targetVersion2 = evaluateSettingsVersion('2.27.0'); // results in '2.0'
const targetVersion3 = evaluateSettingsVersion('3.1.1.0'); // results in '3.0'
FAQs
This package is part of the [`@shapediver/viewer`](https://www.npmjs.com/package/@shapediver/viewer), you can find all information [here](https://viewer.shapediver.com/v3/latest/api/index.html).
We found that @shapediver/viewer.settings demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.