
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@spatialpack/core
Advanced tools
Standards-first glTF/GLB/USDZ engine — analyze, optimize (KTX2/meshopt/WebP/AVIF), recipe search, commerce-readiness scoring + autocorrect, USDZ validation, USDA/USDC, Gaussian splats. Pure TypeScript.
@spatialpack/coreThe engine behind SpatialPack — a standards-first
glTF / GLB / USDZ toolkit, in pure TypeScript. It powers analyze, optimize
(KTX2 / meshopt / WebP / AVIF / Draco), recipe search, commerce-readiness
scoring + autocorrect, USDZ / USDC validation and USDA ↔ USDC round-trip,
visual-diff metrics, and Gaussian-splat ingest.
Most users want the CLI, not this package. Install
@spatialpack/cli(npm i -g @spatialpack/cli) for the command-line surface, or@spatialpack/sdkfor a friendly programmatic wrapper. Install@spatialpack/coredirectly only if you're building on the low-level engine.
import { analyzePath, optimizePath } from '@spatialpack/core';
const report = await analyzePath('model.glb'); // per-mesh/material/texture stats
const result = await optimizePath('model.glb', { preset: 'web-mobile' });
The package ships fine-grained subpath exports — e.g. @spatialpack/core/analyze,
/optimize, /recipe-search, /visual-diff, /conformance, /io,
/splat-input — so consumers pull only what they need. See package.json
exports for the full list.
Functional Source License, Version 1.1, ALv2 Future License (FSL-1.1-ALv2).
You may read, run, and self-host the engine; you may not ship a competing
3D-optimization product on it. The license converts to Apache-2.0 two years
after each release. Full text in LICENSE.
The @spatialpack/cli, @spatialpack/sdk, and @spatialpack/mcp packages
that wrap this engine are MIT.
FAQs
Standards-first glTF/GLB/USDZ engine — analyze, optimize (KTX2/meshopt/WebP/AVIF), recipe search, commerce-readiness scoring + autocorrect, USDZ validation, USDA/USDC, Gaussian splats. Pure TypeScript.
The npm package @spatialpack/core receives a total of 27 weekly downloads. As such, @spatialpack/core popularity was classified as not popular.
We found that @spatialpack/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.