
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@vf.js/launcher
Advanced tools
VF 引擎是一套用于快速构建互动教学场景的解决方案中的图形交互引擎,引擎的设计并不是 **「重复发明轮子(*Reinventing the wheel*)」**,而是基于行业内比较成熟、优秀的方案做的改造与封装。
VF 引擎是一套用于快速构建互动教学场景的解决方案中的图形交互引擎,引擎的设计并不是 「重复发明轮子(Reinventing the wheel)」,而是基于行业内比较成熟、优秀的方案做的改造与封装。
其中渲染模块就是基于业内最轻量与超快的Pixi渲染引擎做的封装改造...
与其它引擎/框架不同的是,VF 被设计为类似FlashPlayer一样插件应用。VF 的核心只关注将场景数据渲染为可交互的视图层,不仅易于上手,还便于与既有项目整合。
VF 引擎致力于完成一套统一跨平台的高性能互动课程制作系统,它能够支持 Web、iOS、Android、Node、桌面应用 和 小程序 不同环境下的图形绘制和各种互动教学场景。
::: tip 提示 VF默认使用WebGL2渲染,初始化时检测到低端设备或不支持的浏览器会自动降级为Canvas2d。 :::
npm i @vf.js/launcher --save-dev
<script src="http://unpkg.com/@vf.js/launcher/dist/launcher.min.js"></script>
// 1. ES6方式引入,CDN Script方式不需要写
import {createVF} from '@vf.js/launcher';
// 2.设置插入页面的div容器
createVF({container:document.getElementById("div")},player=>{
// 3.启动实例
player.play('data.json');
});
FAQs
[https://yunkc.gitee.io/docs/](https://yunkc.gitee.io/docs/)
The npm package @vf.js/launcher receives a total of 1,929 weekly downloads. As such, @vf.js/launcher popularity was classified as popular.
We found that @vf.js/launcher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.