Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
behave-graph
Advanced tools
Behave-Graph is a standalone library that implements the concept of "behavior graphs" as a portable TypeScript library with no required external run-time dependencies. Behavior graphs are expressive, deterministic, and extensible state machines that can encode arbitrarily complex behavior.
Behavior graphs are used extensively in game development as a visual scripting language. For example, look at Unreal Engine Blueprints or Unity's Visual Scripting or NVIDIA Omniverse's OmniGraph behavior graphs.
This library is intended to follow industry best practices in terms of behavior graphs. It is also designed to be compatible with these existing implementations in terms of capabilities. Although, like all node-based systems, behavior graphs are always limited by their node implementations.
Another neat fact about behavior graphs is that they offer a sand boxed execution model. Because one can only execute what is defined by nodes exposed by the host system, you can restrict what can be executed by these graphs. This type of sand-boxing is not possible when you just load and execute arbitrary scripts.
You can join our Discord here:
@beeglebug has started an amazing interactive React node graph editor for behave-graph here:
https://github.com/beeglebug/behave-flow
This library, while small, contains a nearly complete implementation of behavior graphs.
This library is designed to be extended with context dependent nodes, specifically Actions, Events and Queries that match the capabilities and requirements of your system. For example, if you integrate into a 3D engine, you can query for player state or 3D positions of your scene graph, set scene graph properties and also react to overlaps, and player movements. Or if you want to integrate into an AR system, you can react to face-detected, tracking-loss.
After cloning out this git project locally, run the following:
npm install
npm run build
The example behavior graphs are in the /examples
folder. You can execute these from the command line to test out how this library works.
The main syntax is this one:
npm run exec-graph -- ./src/graphs/[examplename].json
Here are some example graphs in their native JSON form:
Print out the text "Hello World!" as soon as the graph starts up!
/src/graphs/core/HelloWorld.json
Console output:
> npm run exec-graph -- ./src/graphs/core/HelloWorld.json
Hello World!
In this example, we use set a variable and also listen to when it changes.
/src/graphs/variables/Changed.json
Console output:
> npm run exec-graph -- ./src/graphs/core/variables/Changed.json
391
This example shows how to branching execution works. The "flow/branch" node has two flow outputs, "true" and "false". The value of it's "condition" input determines the path of execution.
/src/graphs/core/flow/Branch.json
Console output:
> npm run exec-graph -- ./src/graphs/core/flow/Branch.json
Condition is false!
This shows how to create math formulas in logic nodes. In this case the equation is: ( a^1 * 3 + a^2 + (-a^3) ), where a = 3. The answer is -9.
/src/graphs/core/logic/Polynomial.json
Console output:
> npm run exec-graph -- ./src/graphs/core/logic/Polynomial.json
-9
Behave-Graph support asynchronous nodes. These are nodes which will continue execution non-immediately but on their own self-determined schedule. This allows for things such as "Delay" nodes that can sleep for a period of time.
/src/graphs/core/async/Delay.json
Console output:
> npm run exec-graph -- ./src/graphs/core/async/Delay.json
Waiting...
One Second Later!
Building upon waiting for downstream nodes to execute, you can also execute For Loops within Behave-Graph.
/src/graphs/core/flow/ForLoop.json
Console output:
> npm run exec-graph -- ./src/graphs/core/flow/ForLoop.json
Starting For Loop...
Loop Body!
Loop Body!
Loop Body!
Loop Body!
Loop Body!
Loop Body!
Loop Body!
Loop Body!
Loop Body!
Loop Body!
Completed For Loop!
You can register custom events, trigger then and listen on them.
/src/graphs/core/events/CustomEvents.json
Console output:
> npm run exec-graph -- ./src/graphs/core/events/CustomEvents.json
myCustomEvent Fired!
myCustomEvent Fired!
myCustomEvent Fired!
myCustomEvent Fired!
myCustomEvent Fired!
Here is a test of 10,000,000 iteration for loop:
/src/graphs/core/flow/PerformanceTest.json
Here is the console output:
> npm run exec-graph -- ./src/graphs/core/flow/PerformanceTest.json
Starting 10,000,000 iteration for-loop...
1,000,000 more iterations...
1,000,000 more iterations...
1,000,000 more iterations...
1,000,000 more iterations...
1,000,000 more iterations...
1,000,000 more iterations...
1,000,000 more iterations...
1,000,000 more iterations...
1,000,000 more iterations...
1,000,000 more iterations...
Completed all iterations!
30000013 nodes executed in 2.98 seconds, at a rate of 10067118 steps/second
FAQs
Simple, extensible behavior graph engine
The npm package behave-graph receives a total of 9 weekly downloads. As such, behave-graph popularity was classified as not popular.
We found that behave-graph demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.