
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Use Three.js with zero hassle.
Threestrap is a minimal, pluggable bootstrapper for Three.js that gets out of your way.
While this is definitely a miniature framework, it's not really meant to wrap your code, but rather the code you don't care about.
Examples:
Install via npm:
npm install threestrap
Add build/threestrap.js to your Three.js:
<!--
Or use CDNs like
https://cdn.jsdelivr.net/npm/three@0.137.0/build/three.js
-->
<script src="three.js"></script>
<script src="threestrap.js"></script>
Get a threestrap context:
const three = new Threestrap.Bootstrap();
This will create a full-page Three.js WebGL canvas, initialize the scene and camera, and set up a rendering loop.
You can access the globals three.scene and three.camera, and bind events on
the three context:
// Insert a cube
const mesh = new THREE.Mesh(
new THREE.CubeGeometry(0.5, 0.5, 0.5),
new THREE.MeshNormalMaterial()
);
three.scene.add(mesh);
// Orbit the camera
three.on("update", function () {
var t = three.Time.now;
three.camera.position.set(Math.cos(t), 0.5, Math.sin(t));
three.camera.lookAt(new THREE.Vector3());
});
Threestrap is made out of plugins that each do one thing. The basic set up of
empty or core gets you a fully-functional canvas in the body or a specific
DOM element.
Empty:
fallback - Displays a standard message with a link if WebGL is unavailable.bind - Enables event/method binding.renderer - Creates the THREE.WebGLRenderer (or a given class).size - Autosizes canvas to fit or size to given dimensions.fill - Removes margin/padding and sets positioning on the element.loop - Runs the rendering loop.time - Measures time and fps in seconds. Provides clocks.Core:
scene - Creates the THREE.Scenecamera - Creates the THREE.Camerarender - Renders the global scene and camera directly.warmup - Hide canvas for first few frames to avoid stuttering.Additional plug-ins can be added, or the default set can be overridden on a case
by case basis. empty is a do-it-yourself set up.
Shorthands:
// Core only
var three = new Threestrap.Bootstrap();
// Pass in list of plugins
var three = new Threestrap.Bootstrap("core", "stats");
var three = new Threestrap.Bootstrap(["core", "stats"]);
// Insert into specific element
var three = new Threestrap.Bootstrap(element);
var three = new Threestrap.Bootstrap(element, "core", "stats");
var three = new Threestrap.Bootstrap(element, ["core", "stats"]);
// Replace plugins ad-hoc
var three = new Threestrap.Bootstrap(["core", "stats", "render:myRender"]);
The following global options are available with these defaults:
var three = new Threestrap.Bootstrap({
init: true, // Initialize on creation
element: document.body, // Containing element
plugins: [
// Active plugins
"core", // Use all core plugins
// 'render:myRender' // Ad-hoc overrides
],
aliases: {
// Ad-hoc overrides
// 'render': 'myRender',
// 'alias': ['myFoo', 'myBar']
},
});
When init is set to false, initialization only happens when manually calling
three.init(). To destroy the widget, call three.destroy().
Plugins can make objects and methods available on the threestrap context, like
three.Time.now or three.Loop.start().
To enable a plug-in, include its name in the plugins field. Plugins are
installed in the given order.
Plug-in specific options are grouped under the plug-in's name:
const three = new Threestrap.Bootstrap({
plugins: ["core", "stats"],
size: {
width: 1280,
height: 720,
},
camera: {
fov: 40,
},
});
The following aliases are available:
empty = fallback, bind, renderer, size, fill, loop, timecore = empty + scene, camera, render, warmupThreestrap plugins broadcast events to each other, like resize or render.
You can listen for events with .on() and unset them with .off().
three.on("event", function (event, three) {});
var handler = function () {};
three.on("event", handler);
three.off("event", handler);
You can also bind events directly to object methods using .bind:
const object = {
render: function (event, three) {},
yup: function (event, three) {},
redraw: function (event, three) {},
resize: function (event, three) {},
change: function (event, three) {},
};
// Bind three.render event to object.render(event, three)
three.bind("render", object);
// Bind three.ready event to object.yup(event, three);
three.bind("ready:yup", object);
// Bind object.change event to object.redraw(event, three);
three.bind("this.change:redraw", object);
// Bind window.resize event to object.resize(event, three);
three.bind("window.resize", object);
// Bind DOM element's onchange event to object.change(event, three);
three.bind([element, "change"], object);
Steven Wittens - http://acko.net/
FAQs
Minimal Three.js Bootstrapper
We found that threestrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.