
Security News
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.
@arcgis/core
Advanced tools
ArcGIS API for JavaScript ES modules.
This version of the API is currently in development and is not intended for use in production applications.
This is a minified, unbuilt version of the ArcGIS API for JavaScript. You can install this repo via npm and then use the modules directly in a framework such as React, Vue.js or Angular. Or, you can also create your own custom builds with Webpack or rollup.js.
npm install @arcgis/core
The styles, images, fonts, and localization files are located in the @arcgis/core/assets folder and will need to be copied to your build folder. There are various ways to accomplish this depending on your build tooling, below are several code snippets demonstrating the concept. Sample applications can be found here.
For React, use ncp to copy the asset files to the build directory:
# package.json
{
"scripts": {
"start": "ncp ./node_modules/@arcgis/core/assets ./public/assets && react-scripts start",
"build": "ncp ./node_modules/@arcgis/core/assets ./public/assets && react-scripts build",
. . .
},
}
For Angular, configure copying asset files using the architect/build/options/assets section of angular.json
# angular.json
{
"assets": [
{
"glob": "**/*",
"input": "node_modules/@arcgis/core/assets",
"output": "/assets/"
},
. . .
],
}
For other installations, consider using this package script as a starting point:
# package.json
{
"script": {
"copy": "cp -R ./node_modules/@arcgis/core/assets ./dist/assets"
}
}
Windows users can use xcopy or ncp for any platform.
Building apps with the ArcGIS API for JavaScript requires signing up for a ArcGIS Developer Subscription.
Report issues for @arcgis/core at https://github.com/Esri/feedback-js-api-next/issues/new/choose
COPYRIGHT © 2020 Esri
All rights reserved under the copyright laws of the United States and applicable international laws, treaties, and conventions.
This material is licensed for use under the Esri Master License Agreement (MLA), and is bound by the terms of that agreement. You may redistribute and use this code without modification, provided you adhere to the terms of the MLA and include this copyright notice.
See use restrictions at http://www.esri.com/legal/pdfs/mla_e204_e300/english
For additional information, contact: Environmental Systems Research Institute, Inc. Attn: Contracts and Legal Services Department 380 New York Street Redlands, California, USA 92373 USA
email: contracts@esri.com
See copyright.txt for details.
Leaflet is a popular open-source JavaScript library for mobile-friendly interactive maps. It is lightweight and easy to use, but it may not have as many built-in features as @arcgis/core, which is more comprehensive and tailored for enterprise-level applications.
OpenLayers is a high-performance, feature-rich library for displaying map data in web browsers. It offers more flexibility and customization options compared to @arcgis/core, but it requires more effort to implement certain functionalities that are readily available in @arcgis/core.
Mapbox GL JS is a powerful library for rendering interactive maps with vector tiles. It offers high-quality map rendering and customization, similar to @arcgis/core, but focuses more on style and design, whereas @arcgis/core provides a broader range of geospatial analysis tools.
FAQs
ArcGIS Maps SDK for JavaScript: A complete 2D and 3D mapping and data visualization API
The npm package @arcgis/core receives a total of 85,139 weekly downloads. As such, @arcgis/core popularity was classified as popular.
We found that @arcgis/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.

Security News
/Research
Socket found a Rust typosquat (finch-rust) that loads sha-rust to steal credentials, using impersonation and an unpinned dependency to auto-deliver updates.

Research
/Security Fundamentals
A pair of typosquatted Go packages posing as Google’s UUID library quietly turn helper functions into encrypted exfiltration channels to a paste site, putting developer and CI data at risk.