
Security News
Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.
logitech-litra-beam
Advanced tools
This library provides an API for controlling the Logitech Litra Beam light with TypeScript and JavaScript.
Supported functionality:
The library tries its best to automatically identify the connected Litra Beam, but there is some nuance and limitation.
Devices are identified using the HID API (via the hid library). This can find the device whether it's connected via USB or Bluetooth. If the device is connected via both USB and Bluetooth, then the device is listed twice – once for each connection type.
Unfortunately, at the time of writing, this library cannot use the Bluetooth connection because its descriptor is missing the device serial number, so all attempts to send messages to it fail. For this reason, **only direct USB- connected devices are supported".
If you have multiple Litra Beams connected, the first one found will be used UNLESS you provide a specific Litra Beam serial number to the constructor. Device serial numbers are printed in obscenely small print on the back of the device. Thankfully, you can print all connected Litra Beam device descriptor, which contain serial numbers:
node -p "new (require('logitech-litra-beam').LitraBeam)().getDescriptors()"
This library is written in TypeScript, so the API is discoverable in that context. You can also read the source code directly.
Here's a quick example to show how it works. This will:
import { LitraBeam } from 'logitech-litra-beam';
const light = new LitraBeam();
light.on();
light.setTemperaturePercentage(50);
light.setBrightness(150);
setTimeout(() => light.off, 10000);
FAQs
Library for controlling a Logitech Litra Beam light
We found that logitech-litra-beam demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.