
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
makerlab-connector-client
Advanced tools
NPM via Browserify, ejs, Lodash, JsHint, Browserify inline source maps, dev server with livereload (auto refresh), .gitignore.
You will need to first install Node.js and the grunt-cli: npm install -g grunt-cli.
Check this project out from source:
git clone git@github.com:code-dot-org/craft-private.git
cd craft-private
Next, inside the project, you need to install the project's various NPM dependencies:
npm install
And you should now be ready to spin up a development build of your new project:
grunt
A browser should open with a logo displayed:

All of the files required to run the game live in the src folder, including any javascript, images, HTML (ejs templated), and CSS. When the default grunt task is invoked, these files are compiled to a build directory.
Files in the build directory will always be generated and excluded from Git by the .gitignore, as such these will removed without warning and should generally not be edited.
src directory to avoid unnecessary copying during dev builds.Substack's Browserify Handbook.
gruntConfigures and runs an un-minified development build optimised for fast watch performance with source maps and live reload. Opens browser window pointing to a test page on first build.
The project comes with an unminified version of Phaser with arcade physics, this can be replaced if you require updates or one of the alternate physics engines.
You can install new npm-compatible libraries with:
npm install --save my-package-name
Then require it in your code with e.g. var MyCoolTimesavingLibrary = require('My-Cool-Timesaving-Library').
Some interesting npm libraries: list of browserify-friendly game modules, @substack's npm repositories.
Raw vendor packages can be added to src/js/lib.
If adding new libraries that aren't CommonJS compatible, you'll have to additionally update the Browserify shim configuration in our package.json.
We will try to follow the Code.org Javascript styleguide.
Boilerplate based on the Phaser.js grunt/browserify boilerplate, which was based on 1 and 2.
FAQs
Code.org makerlab connector client code
We found that makerlab-connector-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.