
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
An animated HTML5 canvas with a warpspeed/star field effect. Good for backgrounds I guess.
A small NPM package that can be used to grab a HTML5 canvas running a star wars style warp speed animation.
import { getWarpSpeedController } from 'warpspeed';
function chewiePunchIt() {
const warpSpeedController = getWarpSpeedController();
const someContainer = document.querySelector('#someContainerId');
warpSpeed.mountCanvasTo(someContainer); // Renders in as a plain black canvas with no animation
warpSpeed.render(); // Kicks off the animation
// You can then...
// Change the number of stars being rendered:
warpSpeedController.setNumberOfStars(2000); // Default is 7500
// Change the color of the stars:
warpSpeedController.setStarColor('rgb(255, 0, 0)'); // Default and my favourite is 'rainbow'
// Note: Colour must be a valid CSS colour string, 'rainbow' is the only exception here
// Change the size of the stars:
warpSpeedController.setStarRadii(5); // Default is 3
// Change the speed of the stars:
warpSpeedController.setStarVelocities(50); // Default is 3 (50 makes me feel a bit motion sick)
/* All of the above parameters can be passed as parameters when calling getWarpSpeedController but are optional */
// And finally, you can remove the canvas from the DOM:
warpSpeedController.dismountCanvas();
}
I've given the canvas some inline style so that it has a black background and fills the element it is mounted to, but feel free to add your own styles, it has an ID of 'warpSpeedCanvas'. On mounting of the canvas and on page resize, the canvas will automatically set its width and height properties to match it's clientWidth / clientHeight, meaning the resolution should always look just fine. It will also restart the drawing process on resize so that the animation always fills the current resolution.
FAQs
An animated HTML5 canvas with a warpspeed/star field effect. Good for backgrounds I guess.
We found that warpspeed demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.