
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
TurnyJS - tiny NodeJS game server based on Socket.IO.
'client:create-public-room' to the server.
2. Client receive 'room:created' with id in payload.'client:create-private-room' to the server.
2. Client receive 'room:created' with id in payload.'client:find-public-room' to the server.
2. Client receive 'room:found' with id in payload or 'room:not-found'.'client:join-private-room' to the server.
2. Client receive 'room:joined' with id in payload or 'room:not-found'.'game:ready'.'client:ready' or 'client:not-ready' to the server.inititalAction action and after send 'game:initial-state' to all the clients with the result as payload.'game:will-start-in' with countdown as payload. It use countdown parameter as base and decrease it every second.'game:started' to all the clients.'client:turn' to the server. Payload of this message will be passed to 'turnAction' method.'turnAction' is done, 'syncAction' is fired. In 'syncAction' determine what the data will be send with 'game:update-state' message as payload.'game:update-state' with result of 'syncAction' method.'gameOverAction' will be fired. If the game is over - method fires callback with data, which will be passed to 'game:over' message later.'game:update-state' and update current game state.'gameOverAction' keep not firing callback.'game:over' message with information to show the game results, which was build in 'gameOverAction' before.npm install turny --save
here will be described API...
FAQs
Turn-based game server
We found that gamer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.