
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
This module exposes the Live Object Model so that it can be consumed directly from Node.js. It works by communicating with a Max for Live device (included in the repo) through udp sockets.
By default, the module binds on ports 9000 and 9001, so they need to be free.
npm install max4node
The Max for Live device is located in max_device/max4node.amxd.
Drop the device in a MIDI track (doesn't matter which one).
var Max4Node = require('max4node');
var max = new Max4Node();
max.bind();
Get Master Track volume.
max.get({
path: 'live_set master_track mixer_device volume',
property: 'value'
})
.once('value', function(val) {
console.log('Master track volume: ' + val);
});
Arm the first track.
max.set({
path: 'live_set tracks 0',
property: 'arm',
value: true
});
Play a clip.
max.call({
path: 'live_set tracks 0 clip_slots 3 clip',
method: 'fire'
});
Fire the callback with the updated position of the clip (if it's playing).
max.observe({
path: 'live_set 0 clip_slots 3 clip',
property: 'playing_position'
})
.on('value', function(val) {
console.log('Playing position: ' + val);
});
Number of clips in the track.
max.count({
path: 'live_set tracks 0',
property: 'clip_slots'
})
.once('value', function(count) {
console.log(count + ' clips');
});
Promise based versions of get and count are available through max.promise().
max.promise().get({
path: 'live_set master_track mixer_device volume',
property: 'value'
})
.then(function(val) {
console.log('Master track volume: ' + val);
});
max.promise().count({
path: 'live_set tracks 0',
property: 'clip_slots'
})
.then(function(count) {
console.log(count + ' clips');
});
Testing is done with fake sockets, so you don't need to open Ableton and Max.
npm test
I would have never been able to come up with the Max device without looking at the code of Fingz, an awesome project that you should definitely check out.
I learned a lot about Max from it, debugging in Max is as painful as listening to Justin Bieber, but it's the only
way we have to access the Ableton API in a reliable manner (control surfaces programming is a joke, and
not officially supported).
Copyright (c) 2015, Marco Sampellegrini babbonatale@alpacaaa.net
Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
FAQs
Communicate with Ableton Live through Max for Live.
We found that max4node demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.