
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Resource pool for games.
This object is a resource pool for games. Resource pool are used to avoid re-allocating objects constantly, by basically recycling them.
function creatorFunction() {
return { foo: null, bar: null };
}
function initFunction(elem) {
elem.foo = null;
elem.bar = null;
}
const pool = new Pool(creatorFunction, initFunction);
function loop() {
const a = pool.get(true);
const b = pool.get(true);
const c = pool.get(true);
//...
pool.reset();
requestAnimationFrame(loop);
}
loop();
// while you constantly call the loop, the pool lets you create new objects without allocating them.
pool.get(); // returns an object, either retrieving a used object or allocates a new one.
pool.get(true); // returns an object and call the "init" function provided in the constructor. By default, it's false. It does help for performance if you don't have to constantly call init.
pool.reset(); // all objects of the pool used so far are now marked as reusable. So a call to pool.get() will retrieve from the object already used.
pool.recycle(obj); // sometimes, an object got allocated outside the resource pool. We can just recycle that object into the resource pool, so that pool.get() will just return that object.
This is how not to use the resource pool:
const a = pool.get();
pool.reset();
const b = pool.get();
// now, a and b likely point to the same object, or maybe not. It's probably not what you want to achieve.
FAQs
Resource pool for games.
We found that dok-pool demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.