
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
What is Helix? In a nutshell: it's a WebGL 3D/game engine built in Javascript.
I didn't build it to compete with other Javascript 3D engines. Building and maintaining 3D engines is a sort of hobby of mine. It allows me to experiment much more freely than when I'm confined to an existing engine. I do occasionally use it for real projects depending on their requirements.
If you're interested in playing around with it, go ahead! Want to go straight ahead and use it in a professional project, the risk is entirely yours. As the engine is built by me and for myself, you may run into some quirks and pedantries that may be confusing at first. The original code base was ported from a personal C++/DirectX project, and since then large parts of the JS version have been rewritten and remolded. Some concepts from DirectX (blend/stencil states, vertex layouts, ...) stayed in because they were simply good ideas. If you're coming from an old-school Flash background, you may also run into approaches that are similar to the original Away3D "Broomstick" prototype that I developed back in 2010 before it became 4.0.
In any case, I think it's worth making things open source. There may always be things to learn and teach doing so.
Some aspects of note:
The easiest way to get started is just grabbing and including the .js files in the build folder. Take a look at
examples/hello-world to see how to create a simple scene and render it (the other examples hide a lot of boilerplate
code).
Some important things to note:
HX.init(yourDOMCanvas) needs to be called before anything else!requestAnimationFrame. Helix handles this internally and exposes the HX.onFrame Signal.
Just bind a function to it, and it will be called every frame.With this, you're ready to explore the other examples. Easy ones to start:
primitive-textureprimitive-dir-lightprimitivesenv-map-equirectangularggx-lightingio-md5sibenik-objspecular-propertiesIf you want to change code and re-build the project yourself? Helix's compilation process uses Node.js, npm, and gulp, so be sure to have those installed. Then, in a terminal, simply perform the following steps in the helix directory:
npm install -g gulp
npm install
This will make sure all dependencies are installed. Unless any dependencies change, you need to do this only once.
Then, to compile:
gulp
The newly built files will end up in the build folder.
If anything goes wrong, make sure you have the latest versions of Node.js and npm installed!
Helix is divided into several modules, each having their own directory in the src folder and are built to separate files to prevent optional functionality bloating your Javascript includes. Currently these are the following:
helix-core: the module containing the basic game engine and essential functionality.helix-io: the module containing non-essential importers.helix-physics: the module containing the physics engine, which is a wrapper for cannon.js.FAQs
JavaScript 3D game engine
We found that helix3d demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.