
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
Open-source runtime and SDK for persistent multiplayer 3D worlds.
Create a new world project with the gamedev CLI:
mkdir my-lobby-world
cd my-lobby-world
npx gamedev init
npm install
npm run dev
Then open http://localhost:3000.
What npm run dev does:
22.11.0 (or newer in the same major line).WORLD_URL points to localhost..env with local defaults if one does not exist yet.This repository powers the gamedev package and CLI used to scaffold, run, sync, and deploy Lobby world projects.
apps/, assets/, shared/, and world.json.gamedev init
gamedev dev
gamedev app-server
gamedev apps deploy <app>
gamedev world export
gamedev world import
Run gamedev help for the full command list.
If you are working on the runtime/SDK itself (not just a world project):
npm install
cp .env.example .env
npm run dev
Useful commands:
npm run build
npm run test
npm run lint
See CONTRIBUTING.md and CODE_OF_CONDUCT.md.
FAQs
Open-source runtime and SDK for persistent multiplayer 3D worlds.
We found that gamedev demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.