
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
nine-pebbles
Advanced tools
Toguz Kumalak ("nine pebbles") is the Kazakh name of a mancala game. Тоғыз-құмалақ — қазақтың ұлттық дәстүрлі ойындарының бірі, ақыл-ой ойыны.
This is the first version. Many less than the place, I hope everyone to develop together.
Toguz Kumalak is played on a special board having two rows of 9 small pits and two big pits called Kazans. The player's side is the bottom row of the small pits and the player's kazan is the top one (close to the opponent's side).
At the beginning of the game 9 seeds are placed in each small pit.

A player wins a game if he accumulates more seeds in his own kazan than the opponent.
If both players have accumulated the same number of seeds, the game ends by a draw.
Players take turns sowing their seeds. The sowing is performed in the following way:
The player picks all seeds up from one of the pits on his side.
If the chosen pit contained more than one seed then the first picked up seed is dropped back to the starting pit. Then the player continues dropping the taken seeds in counter-clockwise direction, one seed in a pit.
If the chosen pit contained only one seed then the player drops it in the next pit in counter-clockwise direction.
Below is an example of sowing:

A player takes nine seeds from his pit "g" and sows them counter-clockwise.
Note that the first seed falls back to the pit "g".
If the last sown seed lands in a pit on the opponent's side and brings the total number of seeds in the pit to the even number then all seeds from the pit are captured by the player and are moved to the player's kazan.

The last sown seed lands in a pit on the opponent's side and brings
the total number of seeds in the pit to the even number (10).
All these 10 seeds are moved to the player's kazan.
If the last sown seed lands in a pit on the opponent's side and brings the total number of seeds in the pit to three then all seeds from the pit are captured by the player and are moved to the player's kazan and the pit turns into the player's tuzdik ("sacred place" in Kazakh; or tuz in Kyrgyz, which means "salt"). There are several cases when tuzdik is not created:
It is permitted to make such a move, but it wouldn't create a tuzdik. All the seeds that fall into a tuzdik during sowing are captured by the tuzdik's owner and are moved to his kazan.

A player takes ten seeds from his pit "F" and sows them counter-clockwise.
The last sown seed falls in the pit "f" on the opponent's side and brings
the total number of seeds there to three. This pit is turned
into player's tuzdik (all three seeds are moved to player's kazan).

A player takes eleven seeds from his pit "e" and sows them counter-clockwise.
The last sown seed falls in the pit "F" on the opponent's side and brings
the total number of seeds there to three. This pit is NOT turned
into player's tuzdik because it is symmetrical to the opponent's tuzdik in pit "f".
Note that during sowing one of the player's seeds felt into opponent's tuzdik (pit "f")
and is moved to opponent's kazan.
FAQs
Toguz Kumalak ("nine pebbles") is the Kazakh name of a mancala game. Тоғыз-құмалақ — қазақтың ұлттық дәстүрлі ойындарының бірі, ақыл-ой ойыны.
We found that nine-pebbles demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.