
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@antv/g2
Advanced tools
English | 简体中文
G2 is named after Leland Wilkinson’s book The Grammar of Graphics and was profoundly inspired by it in the very beginning. Here are some resources you can begin with:
G2 is usually installed via a package manager such as npm or Yarn.
$ npm install @antv/g2
$ yarn add @antv/g2
The Chart object then can be imported from G2.
<div id="container"></div>
import { Chart } from '@antv/g2';
// A tabular data to be visualized.
const data = [
{ genre: 'Sports', sold: 275 },
{ genre: 'Strategy', sold: 115 },
{ genre: 'Action', sold: 120 },
{ genre: 'Shooter', sold: 350 },
{ genre: 'Other', sold: 150 },
];
// Instantiate a new chart.
const chart = new Chart({
container: 'container',
});
// Specify visualization.
chart
.interval() // Create an interval mark and add it to the chart.
.data(data) // Bind data for this mark.
.encode('x', 'genre') // Assign genre column to x position channel.
.encode('y', 'sold') // Assign sold column to y position channel.
.encode('color', 'genre'); // Assign genre column to color channel.
// Render visualization.
chart.render();
If all goes well, you can get the following lovely bar chart!
This project exists thanks to all the people who contribute.
And thank you to all our backers! 🙏
MIT@AntV.
FAQs
the Grammar of Graphics in Javascript
The npm package @antv/g2 receives a total of 339,905 weekly downloads. As such, @antv/g2 popularity was classified as popular.
We found that @antv/g2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 77 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.