Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
sphero-connector-core
Advanced tools
A thin wrapper round spherov2.js (unofficial API for Sphero® toys)
This is a thin (and partial) wrapper around the unofficial Sphero V2 API for Sphero toys used by Sphero Connector HTTP and Sphero Connector IPC.
The following methods try to find a toy and establish a connection with it.
async connectSpheroMini()
async connectSpheroMiniWithName(toyName: string)
async connectLightningMcQueen()
async connectR2D2()
async connectR2Q5()
async connectBB9E()
async connectToy(toyType: string, toyName: string)
Valid values for toyType
are: SpheroMini
, LightningMcQueen
, R2D2
, R2Q5
, BB9E
.
If a toy is found and connected, an object with the following structure is returned.
{
wake: function() { ... },
sleep: function() { ... },
setMainLedColor: function(hexColor: string) { ... }
}
const connector = require('sphero-connector-core');
const spheroMini = await connector.connectSpheroMini();
spheroMini.setMainLedColor('#FF0000');
Please be aware of the licenses of the components used in this project. Everything else that has been developed by the contributions to this project is under MIT License.
FAQs
A thin wrapper round spherov2.js (unofficial API for Sphero® toys)
The npm package sphero-connector-core receives a total of 1 weekly downloads. As such, sphero-connector-core popularity was classified as not popular.
We found that sphero-connector-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.