
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@spiffcommerce/preview-ar-plugin
Advanced tools
This is a plugin for Preview for enabling ARKit and ARCore support, using the Google Model Viewer.
yarn add @spiffcommerce/preview @spiffcommerce/preview-ar-plugin
import { ARPlugin } from '@spiffcommerce/preview-ar-plugin';
// Create the preview service
const previewService = new SpiffCommerce3DPreviewService({
// ... preview options
});
const arPlugin = new ARPlugin({
// This function should parse the elementString and return a promise that resolves to an HTMLElement
createModelViewer: (elementString: string): Promise<HTMLElement> => {},
// Optional array of mesh names to ignore when exporting the model
ignoredMeshNames: ['mesh1', 'mesh2'],
// Optional map of metadata fields to ignore when exporting the model. The key is the field name, and the value is an array of values to ignore.
ignoredMetadataFields: new Map([['field1', ['value1']], ['field2', ['value2']]]),
// This function should insert the given scripts into the DOM
insertScripts: (sources: string[]): void => {},
// This function should upload the given file to your server and return a promise that resolves to the url of the uploaded file
storeFile: (file: File): Promise<string> => {},
});
// Initialize the preview service
await previewService.initialize({
// ... preview initialization options
});
// Plugin can be registered before or after the preview service is initialized
previewService.registerPlugin(arPlugin);
if (arPlugin.arSupported()) {
await arPlugin.generateModel(true);
arPlugin.launchAR();
}
FAQs
Spiff Commerce Preview plugin for Augmented Reality
We found that @spiffcommerce/preview-ar-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.