Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
exokit https://example.com # run site in WebGL/VR/AR
Exokit is a full HTML5 web browser, written as a node.js module. It lets you run a web site as a program.
Exokit can do everything a browser can do -- except render HTML.
Exokit can't render HTML, but it can draw Canvas and WebGL -- natively, and fast -- as well as take keyboard/mouse/mixed reality input with the regular APIs. It's a browser for the post-(2D) world.
Think JSDOM, except it actually runs the DOM in a window
. Or think Electron, except 300k and no compile step. Or, think an emulator for running web sites.
The multipmedia parts (e.g. WebGL) are pluggable native modules. Everything else is Javascript. It's pretty easy to experiment and add new Web APIs.
Exokit runs on Android/iOS, as well as Windows, Linux, and macOS.
What Exokit can do:
https:
site<script>
<image>
, <video>
, <audio>
node
What Exokit cannot do:
The web is imporant. The most important part of the web is that it's open. The web is not open if you need to be a genius to build a web browser.
Despite modern browsers being nominally open source, their code is impenetrable. You've probably never compiled a web browser, and almost certainly never added things. Despite the amount of time you spend in a browser.
With Exokit, anyone can write some Javascript to control their experience of the web.
Works:
Planned:
The core is Javascript and is platform-agnostic. Porting work is restricted to the native graphics APIs.
FAQs
Native VR and AR engine for JavaScript
The npm package exokit receives a total of 103 weekly downloads. As such, exokit popularity was classified as not popular.
We found that exokit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.