
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@whereby.com/core
Advanced tools
@whereby.com/core@whereby.com/core is the low-level foundation of the Whereby SDK. It exposes a set of containers, actions, and client classes for working with local media and room connections. It's used to power the Whereby Browser SDK, Whereby Assistants and React Native SDK and other forms of Whereby meetings. It also contains utils which may be useful in custom experiences.
Use Core if you need fine-grained control over media and connections, or if you are building a custom integration outside of React. For most web apps, the Browser or React SDKs will be easier starting points.
npm install @whereby.com/core
or
yarn add @whereby.com/core
or
pnpm add @whereby.com/core
[!IMPORTANT] In order to use
@whereby.com/core, you must have a Whereby account from which you can create room URLs, either manually or through the Whereby API.
import { WherebyClient } from "@whereby.com/core";
const client = new WherebyClient();
// manage local devices
const localMedia = client.getLocalMedia();
// manage room connection
const roomConnection = client.getRoomConnection();
The LocalMediaClient controls microphones, cameras and local media tracks. It provides methods to request permissions, start and stop tracks, and switch between devices. It also exposes state such as the list of available devices and the current active tracks.
Typical usage:
// you can pass options or a MediaStream
await localMedia.startMedia({ audio: true, video: true });
localMedia.toggleCamera(); // toggle camera on/off
The RoomConnectionClient handles joining and leaving rooms, as well as observing connection and remote participant state.
Typical usage:
// initialize with your room URL
roomConnection.initialize({
roomUrl: "https://your-subdomain.whereby.com/your-room",
});
// join the room
try {
await roomConnection.joinRoom();
} catch(error) {
console.error("Could not join room", error);
}
// listen for changes in connection state
roomConnection.subscribeToConnectionStatus((state) => {
console.log("Connection state changed:", state);
});
FAQs
Core library for whereby.com sdk
The npm package @whereby.com/core receives a total of 39,323 weekly downloads. As such, @whereby.com/core popularity was classified as popular.
We found that @whereby.com/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.