Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Castmill is an Open Source library that implements a full featured Digital Signage player. Some of its features:
Use yarn or npm to install the package in your project:
yarn add castmill
Check the demos and API reference for how to use the library.
This library is covered by the AGPL license. If you are in need of a different license for commercial purposes, please get in touch with us.
In order to run the demo just run:
yarn dev
If you want to build the demo for publishing somewhere:
yarn build
Widgets are the primitives that shows any content on a display. Widgets must be completely isolated from the rest of the system and other primitives. If a widgets crashes should not affect the player in any significant way. If a widget leaks memory, it will be cleaned when the widget is destroyed.
Widgets should be self-contained. They must cache all the assets they need, as well as their code. They must work online as well as offline. Service workers will be used for this.
More than one widget can exist at the same time on the display. Widgets can be used to fill layouts. But this is outside the scope of the widget. The widget does just need to show, and play itself as required by the layout orchestrator.
Widgets may have a server componet besides the client part. The server component may be needed to feed the widget with dynamic informations, such as news, real state data, etc.
Layers are the containers of the widgets. Layers can be placed around in the screen, moved or animated. They are very lightweight and expose the widget interface to the rest of the system.
Layouts are containers for several layers or playlists. A playlist can contain layers and layouts, allowing mixing content with different layouts for maximum flexibility.
A layer server is responsible of putting and removing the layers on a given container.
FAQs
Digital Signage Player
We found that castmill demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.