
Research
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
@webgpu/types
Advanced tools
This package defines Typescript types (`.d.ts`) for the upcoming [WebGPU standard](https://github.com/gpuweb/gpuweb/wiki/Implementation-Status).
This package defines Typescript types (.d.ts) for the upcoming WebGPU standard.
Use this package to augment the ambient "dom" type definitions with the new definitions for WebGPU.
This repo also generates typedoc docs here: https://gpuweb.github.io/types
See the TypeScript handbook.
npm install --save-dev @webgpu/typesyarn add --dev @webgpu/typespnpm add -D @webgpu/typesIf you are on TypeScript < 5.1, you will also need to install @types/dom-webcodecs
as a sibling dependency. The version you need depends on the TypeScript version;
see the tests for examples.
Since this package is outside DefinitelyTyped, the dependency won't be picked up automatically. There are several ways to add a additional TypeScript type definition dependencies to your TypeScript project:
tsc and tsc-based bundlersIn tsconfig.json:
{
// ...
"compilerOptions": {
// ...
"types": ["@webgpu/types"]
}
}
Or you can use typeRoots:
{
// ...
"compilerOptions": {
// ...
"typeRoots": ["./node_modules/@webgpu/types", "./node_modules/@types"]
}
}
This may work better if your toolchain doesn't read tsconfig.json.
/// <reference types="@webgpu/types" />
If you use Webpack and the options above aren't sufficient (this has not been verified),
you may need the following in webpack.config.js:
"types": ["@webgpu/types"]
Please contribute a PR to add instructions for other setups or improve existing instructions. :)
git submodule update --initgpuweb changes: pushd gpuweb && git checkout main && git pull && popdnpm cigenerated/index.d.ts: npm run generategenerated/index.d.ts and dist/index.d.ts.
The generated file is tracked by Git so you can see what has changed.
Update the latter according to changes from the former.
Note the generated/ and dist/ files are not the same.
See below for intentional differences.npm run formatMost or all of these should be fixed in the generator over time.
any changed to object for WebIDL object.The following differences are TODO: should be changed in the final result.
textureBindingViewDimension.The following differences will remain.
onuncapturederror strongly typed.addEventListener('uncapturederror') type support.getContext definitions.GPUExtent3DStrict and GPUOrigin2DStrict.(only for people who have npm publish access)
git checkout main && git pull git@github.com:gpuweb/types.git main && git submodule update --init && npm version patch && git push git@github.com:gpuweb/types.git main --tags && npm publishgit checkout maingit pull https://github.com/gpuweb/types.git main
origin, just make sure you are referring to the right repo)git submodule update --initnpm version patchgit push https://github.com/gpuweb/types.git main --tagsnpm publish --otp=<code>
<code> with the one-time password from your authenticator, since two-factors authentication is required to publish.npm adduser first and it will guide you through adding the npm account.Three.js is a popular JavaScript library that simplifies the creation of 3D graphics on the web. While it abstracts many complexities of WebGL, it does not provide direct access to the WebGPU API like @webgpu/types. Three.js is more focused on ease of use and rapid development of 3D scenes.
Babylon.js is another powerful 3D engine for web development. It provides a comprehensive set of tools for creating 3D applications, including support for WebGPU. However, it is more of a high-level framework compared to the low-level access provided by @webgpu/types.
FAQs
This package defines Typescript types (`.d.ts`) for the upcoming [WebGPU standard](https://github.com/gpuweb/gpuweb/wiki/Implementation-Status).
The npm package @webgpu/types receives a total of 5,002,827 weekly downloads. As such, @webgpu/types popularity was classified as popular.
We found that @webgpu/types demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.

Security News
/Research
Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.