
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
flit-physics
Advanced tools
Flit is a tiny little physics engine for 3js. It doesn't do much yet! but I believe!
Spheres, gravity, and a spatial-hash broadphase — nothing more, on purpose.
All simulation state lives in flat Float32Arrays (structure-of-arrays), so
the CPU path doubles as the reference implementation for a future WebGPU
compute backend: same buffers, same kernels, no re-architecting.
World — point-sphere particles, semi-implicit Euler integration,
impulse + positional-correction contact solver, infinite ground plane.SpatialHash — uniform grid broadphase keyed by Morton (Z-order)
cell codes. This is the Euclidean cousin in the LSH family: MinHash
buckets documents by Jaccard similarity; this buckets positions so
nearby points collide in the same bucket. Morton keys are bijective
(no hash-collision pair bloat), invertible (no side table), and
locality-ordered for a future sorted-array GPU backend.THIRD_PARTY_NOTICES.md for provenance and licenses.Building a little three.js game or demo? Two ways in:
skills/flit/SKILL.md — copy the skills/flit/ directory into
your agent's skills path (e.g. .claude/skills/, ~/.code_puppy/skills/).
It carries the 30-second integration recipe, the MCP option, measured
performance envelope, and contributor rules.npm run mcp, or point your client at it:{
"mcpServers": {
"flit": {
"command": "npx",
"args": ["vite-node", "mcp/server.ts"],
"cwd": "<path-to-this-repo>"
}
}
}
Tools: flit_info, flit_reset, flit_spawn (rain/explosion/grid/fountain
presets), flit_add_particles, flit_step, flit_state — the last two
return flat xyz positions shaped for InstancedMesh syncing.
npm i flit-physics
import { World } from 'flit-physics';
const world = new World({ restitution: 0.4 }); // gravity and a floor at y=0 included
const ball = world.addParticle({ position: [0, 10, 0], radius: 0.5, mass: 1 });
// fixed timestep, e.g. from your rAF loop
world.step(1 / 60);
// sync to three.js: positions is a live Float32Array, 3 floats per particle
mesh.position.set(
world.positions[ball * 3],
world.positions[ball * 3 + 1],
world.positions[ball * 3 + 2],
);
npm install
npm test # vitest
npm run build # tsc -> dist/
npm run bench # broadphase + full-step micro-benchmarks
npm run demo # three.js demo scene (vite dev server)
Deterministic seeds; numbers from a local dev machine, recorded at commit time (see commit messages for the full series, including rejected designs).
bench/broadphase.bench.ts — broadphase only, N=4096:
xor-hash 3.4–3.7 ms (444 pairs, ~90% collision bloat) → Morton keys
with ordered probing 3.5–3.7 ms (234 pairs, exact).bench/world.bench.ts — full World.step, N=1024:
xor-hash 0.85 ms/step → Morton ordered-probing 0.83 ms/step →
0.93 ms/step with the sequential-impulse velocity solver
(4 iterations + LUT friction). Exact keys, real contacts, +11%.bench/scaling.bench.ts — two regimes, and one important caveat.
Fixed box (density rises): pairs scale ~N² from crowding physics.
Scaled box (constant spawn density): flat O(N) ≈ 1.2 ms per 1000
through N=8000 — but only while bodies are scattered. The
caveat: with gravity on, everything rains into a dense floor pile
over ~2-4s (WARMUP=240 to reproduce), and steady-state piles are
contact-solver dominated: ~4.3 ms per 1000 at N=8000 (87k contacts
x 4 iterations), putting the 60fps pile budget near 3k bodies.
The known fix for piles is island sleeping / agglomeration — parked.bench/morton-libs.bench.ts — codec bake-off vs npm libs
(npm run bench:libs): ours 3.8 ns/encode, fast-morton MB 26.1,
fast-morton LUT 43.8, @thi.ng/morton 539.9. In-house wins; the libs
stay as devDependencies purely so the bake-off stays runnable.npm run demo, 220 balls in a boxdocs/issues/001-settled-pile-performance.md
(self-contained brief with repro, evidence, and definition of done;
suitable for an agent or human to pick up)MIT — see LICENSE. Third-party portions and their licenses are listed in
THIRD_PARTY_NOTICES.md.
FAQs
Flit is a tiny little physics engine for 3js. CPU-first, GPU-shaped.
The npm package flit-physics receives a total of 28 weekly downloads. As such, flit-physics popularity was classified as not popular.
We found that flit-physics demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.