
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Nova ECS is the Entity Component System that NovaJS uses. It is heavily inspired by Bevy ECS.
Bevy and Wikipedia have good explainations, so this section is TODO(mattsoulanille).
An Entity is a general purpose object that has a unique id and a number of components attached to it. In NovaJS, most things that show up on the screen are entities, including ships, projectiles, planets, and asteroids, but an entity does not need to correspond to something visible to the user.
// entity.ts
export class Entity {
components: ComponentMap,
name?: string;
...
}
Components are data stored on an entity (in the components
map).
// component.ts
class Component<Data> {
readonly type?: t.Type<Data>;
readonly name: string;
constructor(name: string) {
this.name = name;
}
toString() {
return `Component(${this.name})`;
}
}
As an example, this is how a Position
component could be defined and added to an entity.
import {Entity} from 'nova_ecs/entity'
import {Component} from 'nova_ecs/component'
const testEntity = new Entity();
interface Position {
x: number,
y: number,
};
const PositionComponent = new Component<Position>('position');
testEntity.components.set(Position, {x: 123, y: 456});
A system is a function that takes components as arguments and mutates them.
// system.ts
class System<StepArgTypes extends readonly ArgTypes[] = readonly ArgTypes[]> {
...
// Many of these parameters are optional. Only `name`, `args`, and `step` are required.
constructor({ name, args, step, before, after, events }: SystemArgs<StepArgTypes>) {
...
}
...
}
A system is run when the world (world.ts
) is stepped. The world runs the system on the components of each entity that the system supports. In most cases, a system supports an entity if and only if the entity has all the components in the system's args
parameter. As an example, here's a system that moves entities that have the PositionComponent
component (from above) according to a VelocityComponent
.
import {World} from 'nova_ecs/world';
import {Entity} from 'nova_ecs/entity';
import {Component} from 'nova_ecs/component';
import {System} from 'nova_ecs/system';
interface Position {x: number, y: number};
interface Velocity {dx: number, dy: number};
const PositionComponent = new Component<Position>('position');
const VelocityComponent = new Component<Velocity>('velocity');
const MoveSystem = new System({
name: 'MoveSystem',
// `as const` is necessary for preserving type information of the list
// Otherwise, the args to step would all have type `Position | Velocity`.
args: [PositionComponent, VelocityComponent] as const,
step(position, velocity) {
// Types for `position` and `velocity` are automatically inferred from
// the `args` list.
position.x += velocity.dx;
position.y += velocity.dy;
}
});
const world = new World();
world.addSystem(MoveSystem);
const testEntity = new Entity()
.addComponent(PositionComponent, {x: 0, y: 0}) // Chaining API, because writing 'testEntity.components.set(...)'
.addComponent(VelocityComponent, {dx: 1, dy: 2}); // every time is a bit tiring.
world.entities.set('test entity uuid', testEntity);
// Step the world and run MoveSystem on testEntity once.
world.step();
console.log(testEntity.components.get(PositionComponent));
// {x: 1, y: 2}
Install the nova_ecs
node module and copy-paste this into an index.ts
file to see it in action.
This documentation is TODO, but a resource is essentially a globally available component that's added to the world instead of to an entity. Similar to Bevy's Resource.
This documentation is TODO. Similar to Bevy's Query. Everything uses it. args
of System
are actually just used to create a query.
This documentation is TODO. Allows doing more with queries than just requiring components. See optional.ts
and provider.ts
for example uses.
Docs TODO, but they essentially are just functions that the world calls with itself.
FAQs
The Entity Component System for NovaJS
The npm package nova_ecs receives a total of 9 weekly downloads. As such, nova_ecs popularity was classified as not popular.
We found that nova_ecs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.