
Security News
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.
@beyonk/svelte-mapbox
Advanced tools
Maps and Geocoding (Autocomplete) MapBox components in Vanilla JS (or Svelte)
SvelteKit Ready
SSR Ready
Lightweight
No clientside dependencies (Map)
Allow creation of custom Svelte components on the map
Note that the GeoCoder has a clientside dependency, since it adds about 0.5mb to the bundle size, and significant time to the build time if bundled.
npm install --save-dev @beyonk/svelte-mapbox
The container component is the map, and there are a variety of components which go on the map.
<Map
accessToken="<your api key>" // add your api key here
bind:this={mapComponent} // Get reference to your map component to use methods
on:recentre={e => console.log(e.detail.center.lat, e.detail.center.lng) } // recentre events
options={{ scrollZoom: false }} // // add arbitrary options to the map from the mapbox api
>
<Earthquakes /> // Any custom component you create or want here - see marker example
<Marker lat={someLat} lng={someLng} color="rgb(255,255,255)" label="some marker label" popupClassName="class-name" /> // built in Marker component
<NavigationControl />
<GeolocateControl options={{ some: 'control-option' }} on:eventname={eventHandler} />
<ScaleControl />
</Map>
<script>
import { Map, Geocoder, Marker, controls } from '@beyonk/svelte-mapbox'
import Earthquakes from './Earthquakes.svelte' // custom component
const { GeolocateControl, NavigationControl, ScaleControl } = controls
// Usage of methods like setCenter and flyto
mapComponent.setCenter([lng,lat],zoom) // zoom is optional
mapComponent.flyTo({center:[lng,lat]}) // documentation (https://docs.mapbox.com/mapbox-gl-js/example/flyto)
// Define this to handle `eventname` events - see [GeoLocate Events](https://docs.mapbox.com/mapbox-gl-js/api/markers/#geolocatecontrol-events)
function eventHandler (e) {
const data = e.detail
// do something with `data`, it's the result returned from the mapbox event
}
</script>
<style>
:global(.mapboxgl-map) {
height: 200px;
// sometimes mapbox objects don't render as expected; troubleshoot by changing the height/width to px
}
</style>
By default, markers are typical map pins to which you can pass a color property.
<Marker color={brandColour} />
You may also create a custom pin with the default slot.
<Marker
lat={waypoint.geo.lat}
lng={waypoint.geo.lng}
>
<a href={waypoint.slug}>
<div class='myMarker {($mapData.activeMarker == waypoint.id) ? 'active' : ''}'
style="
color:{mainPoint.color};
background-image: url('{(waypoint.images != undefined) ? waypoint.images[0].thumb.url : ''}');
">
</div>
</a>
</Marker>
By default a popup is revealed when you click a pin. It is populated with text provided in the label property.
<Marker label={markerText} />
To indicate interactivity, you may target the marker with some custom CSS:
<style>
:global(.mapboxgl-marker){
cursor: pointer;
}
</style>
Optionally, disable the popup with the popup={false} property:
<Marker popup={false} />
You may alternatively pass a custom DOM element to the marker to use as a popup.
<Marker lat={pin.coordinates.latitude} lng={pin.coordinates.longitude}>
<div class="content" slot="popup">
<h3>{pin.name}</h3>
<Markdown source={pin.description} />
</div>
<img src="{pin.images.length > 0 ? pin.images[0].url : ""}" alt="{pin.name}"/>
</div>
</Marker>
The map has reactive properties for center and zoom. This means that if you set these properties, or modify them whilst the map is displayed, the map will react accordingly.
This also means that if you bind these properties to a variable, that variable will automatically be updated with the current center and zoom of the map if the user moves or zooms the map.
This is often easier than waiting for events such as recentre or zoom to be fired, to update markers and similar:
<Map accessToken="<your api key>" bind:center bind:zoom>
<Marker bind:lat bind:lng />
</Map>
<script>
let center
let zoom
$: lng = center[0]
$: lat = center[1]
</script>
The map has a variety of methods which delegate to a queue. The reason for this is that MapBox is quite a heavy library, and rendering a map is a pretty heavy operation. It's hard to guarantee when everything is ready in your browser, and when you can start doing things with it.
In case you want raw map access to interact directly with the map, you can call getMap on the map and interact with it that way. However we don't recommend it, as you have no guarantees that the
map is ready in your browser when you call it this way.
The Geocoder is an autocompleting place lookup, which returns a lat and lng for a place.
<Geocoder accessToken="<your api key>" on:result={somePlaceChangeFunction} />
<script>
import { Geocoder } from '@beyonk/svelte-mapbox'
</script>
The geocoder has five events you can subscribe to: on:loading, on:result, on:results, on:clear, and on:error which are documented here
The most important event is on:result which is fired when a user selects an autocomplete result.
There is a sixth event specific to this library, which is on:ready, which is fired when the component is ready for use. You can likely ignore it.
You can add additional css to override mapbox provided CSS by passing the customStylesheetUrl property to either the Map or Geocoder components.
To see the earthquakes demo:
Make sure you copy the .env file to .env.local and then populate it with your mapbox key.
npm run dev
FAQs
Unknown package
The npm package @beyonk/svelte-mapbox receives a total of 895 weekly downloads. As such, @beyonk/svelte-mapbox popularity was classified as not popular.
We found that @beyonk/svelte-mapbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.