
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
signalk-open-wind-plugin
Advanced tools
A robust Signal K plugin for integrating OpenWind sensor data with automatic reinstallation capabilities.
git clone https://github.com/vepkenez/signalk-open-wind-plugin.git
cd signalk-open-wind-plugin
npm run install
# Install directly from GitHub
cd ~/.signalk
npm install https://github.com/vepkenez/signalk-open-wind-plugin.git
npm run install
If you prefer manual installation:
Copy plugin to Signal K directory:
cd ~/.signalk
npm install /path/to/signalk-open-wind-plugin
Create startup script:
# Create startup-plugins.sh in ~/.signalk/
# (See install.sh for the script content)
Modify Signal K server startup script:
# Modify ~/.signalk/signalk-server to call startup-plugins.sh
The plugin provides the following Signal K data paths:
environment.wind.speedApparent - Apparent wind speed (m/s)environment.wind.angleApparent - Apparent wind angle (rad)sensors.mast.yaw - Raw sensor yaw value (rad)sensors.mast.windAngle - Raw wind angle from sensor (rad)debug-awa-degrees - Apparent wind angle in degreesdebug-wind-speed-knots - Wind speed in knotsdebug-mast-rotation-degrees - Mast rotation in degreesdebug-sensor-yaw-degrees - Raw sensor yaw in degreesConfigure the plugin through the Signal K admin interface:
The plugin listens for NMEA sentences on UDP port 2000:
$WIMWV,angle,R,speed,N,A*checksum - Wind data$WIHDM,heading,M*checksum - Heading dataThe plugin requires Python with the following packages:
numpybleak (for Bluetooth communication)These are automatically installed when you run npm run install. The installer will try multiple methods to handle different Python environments.
If the automatic installation fails (common on newer Ubuntu/Debian systems with externally managed Python environments):
# Try normal installation first
pip3 install numpy bleak
# If that fails, try with --break-system-packages
pip3 install --break-system-packages numpy bleak
# Or install for user only
pip3 install --user numpy bleak
Error: "externally-managed-environment"
--break-system-packages flag (as shown above)--user flag for user-only installationThe automatic reinstallation system should handle this, but if issues persist:
Check the startup script:
~/.signalk/startup-plugins.sh
Verify plugin installation:
ls -la ~/.signalk/node_modules/open-wind
Check Signal K logs:
tail -f ~/.signalk/skserver-raw_*.log
Verify Python environment:
/home/damon/penv/bin/python --version
Check Python dependencies:
/home/damon/penv/bin/python -c "import numpy, bleak"
signalk-open-wind-plugin/
├── plugin/
│ ├── index.js # Main plugin code
│ └── OpenWind.py # Python data processor
├── public/
│ └── index.html # Web interface
├── package.json # Plugin metadata
├── install.sh # Installation script
└── README.md # This file
Test the plugin installation:
# Remove plugin to simulate server update
rm ~/.signalk/node_modules/open-wind
# Start server (should auto-reinstall)
~/.signalk/signalk-server
# Verify plugin is working
curl http://localhost:3000/signalk/v1/api/vessels/self | grep open-wind
MIT License - see LICENSE file for details.
IMPORTANT SAFETY NOTICE: This software is provided for educational and experimental purposes. The authors and contributors are not responsible for any damage, injury, or loss that may result from the use of this software in marine environments. Always verify wind data with multiple sources and never rely solely on this plugin for navigation or safety-critical decisions. Use at your own risk.
For issues and questions:
FAQs
Signal K plugin for integrating OpenWind sensor data
We found that signalk-open-wind-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.