Tuesday, March 31, 2026

glTF: "JPEG of 3D", Sketchfab design models search

glTF (GL Transmission Format) is a royalty-free, open-standard file format designed by the Khronos Group for the efficient transmission, loading, and runtime rendering of 3D models and scenes. Often called the "JPEG of 3D", it streamlines 3D workflows by offering a standardized format that minimizes file size and processing needed, supporting PBR (physically based rendering) for high-quality visuals.

 glTF - Wikipedia

glTF (Graphics Library Transmission Format or GL Transmission Format and formerly known as WebGL Transmissions Format or WebGL TF) is a standard file format for three-dimensional scenes and models. A glTF file uses one of two possible file extensions: .gltf (JSON/ASCII) or .glb (binary). 


It is JSON-based, renders instantly in web browsers (using Three.js or Babylon.js), and—most importantly for you—it supports Custom Extensions.

You can take a dumb 3D model in a glTF file and inject your own custom semantic JSON data directly into the node tree.



The core of glTF is a JSON file that describes the structure and composition of a scene containing 3D models, which can be stored in a single binary glTF file (.glb). The top-level elements of the file include: Scenes and nodes, cameras, meshes, buffers, materials, textures, skins and animations.

























HTTP / fetch from node.js; skip Axios!

How to make an HTTP request in Node.js

...using the request package (now deprecated) to make HTTP requests in Node.js.
Then promises became mainstream and I switched to request-promise (also deprecated).
In more recent times I moved to axios and I thought I would never look back… and yet here we are.
The HTTP story in Node.js keeps evolving, and for good reasons!

Making HTTP requests is one of the most common tasks in Node.js development.
Whether you’re calling a REST API, fetching data from an external service, or building a web scraper, you need to know how to do it effectively.

Quick Answer: Use fetch()


npm just got HACKED (supply chain attacks explained) - YouTube
NetworkChuck


What happened, are you affected & how to prevent - axios supply chain attack - YouTube
Maximilian Schwarzmüller



axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity

axios is the most popular JavaScript HTTP client library with over 100 million weekly downloads. On March 30, 2026, StepSecurity identified two malicious versions of the widely used axios HTTP client library published to npm: axios@1.14.1 and axios@0.30.4. The malicious versions inject a new dependency, plain-crypto-js@4.2.1, which is never imported anywhere in the axios source code