Product
Socket Now Supports uv.lock Files
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
exokit https://example.com # run site in WebGL/VR/AR
Exokit is a full HTML5 web browser, written as a node.js module. It lets you run a web site as a program.
Exokit can do everything a browser can do -- except render HTML.
Exokit can't render HTML, but it can draw Canvas and WebGL -- natively, and fast -- as well as take keyboard/mouse/mixed reality input with the regular APIs. It's a browser for the post-(2D) world.
Think JSDOM, except it actually runs the DOM in a window
. Or think Electron, except 300k and no compile step. Or, think an emulator for running web sites.
The multipmedia parts (e.g. WebGL) are pluggable native modules. Everything else is Javascript. It's pretty easy to experiment and add new Web APIs.
Exokit runs on Android/iOS, as well as Windows, Linux, and macOS.
What Exokit can do:
https:
site<script>
<image>
, <video>
, <audio>
node
What Exokit cannot do:
The web is imporant. The most important part of the web is that it's open. The web is not open if you need to be a genius to build a web browser.
Despite modern browsers being nominally open source, their code is impenetrable. You've probably never compiled a web browser, and almost certainly never added things. Despite the amount of time you spend in a browser.
With Exokit, anyone can write some Javascript to control their experience of the web.
Works:
Planned:
The core is Javascript and is platform-agnostic. Porting work is restricted to the native graphics APIs.
FAQs
Native VR and AR engine for JavaScript
The npm package exokit receives a total of 41 weekly downloads. As such, exokit popularity was classified as not popular.
We found that exokit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.