Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
This repo houses are pure .Net version of the Buttplug Typescript/Javascript Client, implementing the Version 3 Buttplug Spec. It is expected to run from a browser against either Intiface Central (GUI) or Initface Engine (CLI). No Rust FFI bindings are required.
For those of you that have been around a while, you may remember that this used to be the main Typescript/Javascript implementation. From 2017 to 2020, it was a reference version of the Buttplug Intimate Haptics Control Standard.
Then I rewrote everything in Rust because I like Rust more and it's far easier for me to port across platforms. This repo was archived ~2 years ago in preference to seating the C# client and server on top of the Rust implementation of Buttplug, as part of the Rust FFI Project.
That project ended up being a partial failure.
While the FFI system is handy for languages where it is very difficult to rebuild some parts of the library (C/C++/Java/etc...), for managed langauges like Javascript and C#, requiring both the client and server to use the FFI was overkill, and caused many extremely difficult-to-debug issues. With that in mind, the Typescript implementation in this repo is being turned into a Client only. The WASM server and Embedded Connector will stay in the FFI repo, but will be another NPM package that will be optional.
FAQs
Buttplug Client Implementation for Typescript/Javascript
The npm package buttplug receives a total of 8,543 weekly downloads. As such, buttplug popularity was classified as popular.
We found that buttplug demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.