Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@amsterdam/react-maps
Advanced tools
Please do not use this package anymore.
All dependencies can also be found at: npm install --save @amsterdam/arm-core
Loosely implemented package using react with leaflet. As compared to the existing react-leaflet, we want to set up things different in this repo:
useMapInstance
, users can just attach their own plugin / leaflet extension to the map instance.npm install --save @amsterdam/react-maps
- exports useMapInstance, useMapEvents, useEvents, ToolTip, Popup, etc.
Install dependencies: npm install
Start the example app: npm run start
and check out http://localhost:8080
Checkout ./src/example/App.tsx
for how to implement the components.
First build the package: npm run build
Then simply execute npm link
in this repo, then in your repo where you want implement this package npm link @amsterdam/react-maps
Then we have just one issue: we now have two react dependencies: one in your project, and the one in this repo. This will unfortunately resolve in an error. There are two ways of fixing this:
...
resolve: {
modules: ['node_modules'],
extensions: ['.js', '.jsx'],
alias: {
react: path.resolve('./node_modules/react'),
'react-dom': path.resolve('./node_modules/react-dom'),
},
},
react
and react-dom
folder in this repo in the node_modules
.[1.1.1]
FAQs
ReactJS wrapped around Leaflet
The npm package @amsterdam/react-maps receives a total of 303 weekly downloads. As such, @amsterdam/react-maps popularity was classified as not popular.
We found that @amsterdam/react-maps demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.