
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@2gis/mapgl-ruler
Advanced tools
Ruler plugin for Mapgl
Install with NPM
npm install @2gis/mapgl-ruler
Import the Ruler class to your project and use it:
import { Ruler } from '@2gis/mapgl-ruler';
const map = new mapgl.Map('container', {
center: [55.31878, 25.23584],
zoom: 13,
key: 'Your API access key',
});
const ruler = new Ruler(map, {
points: [
[55.31878, 25.23584],
[55.35878, 25.23584],
[55.35878, 25.26584],
]
});
Import the RulerControl class to your project and use it:
import { RulerControl } from "@2gis/mapgl-ruler";
const map = new mapgl.Map('container', {
center: [55.31878, 25.23584],
zoom: 13,
key: 'Your API access key',
});
const control = new RulerControl(map, { position: 'centerRight' })
Mapgl-ruler uses github-flow to accept & merge fixes and improvements. Basic process is:
npm run docker:test and make sure nothing is brokenPull requests with failing tests will not be accepted.
Also, if you modify packages or add them to package.json, make sure you use npm and update package-lock.json.
npm run docker:test
npm run docker:screenshot:update
npm version patch|minor|major. This command returns a new package version. Let assume it's 1.2.3npm run deploy-gh-pages on your local machine from a commit you want to deploy as a demo.FAQs
Ruler plugin for [Mapgl](https://docs.2gis.com/en/mapgl/overview)
The npm package @2gis/mapgl-ruler receives a total of 336 weekly downloads. As such, @2gis/mapgl-ruler popularity was classified as not popular.
We found that @2gis/mapgl-ruler demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.