Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
@conveyal/analysis-ui
Advanced tools
This is the user interface component of Conveyal Analysis, which allows users to create public transport scenarios and evaluate them in terms of cumulative opportunities accessibility indicators.
Please note that Conveyal does not provide technical support for third-party deployments of Analysis. We provide paid subscriptions to a cloud-based deployment of this system which performs these complex calculations hundreds of times faster using a compute cluster. This project is open source primarily to ensure transparency and reproducibility in public planning and decision making processes, and in hopes that it may help researchers, students, and potential collaborators to understand and build upon our methodology.
The Scenario Editor needs an Analysis Backend running to point at. By default it expects it to be running at http://localhost:7070
.
Copy the /configurations/default/env.yml.tmp
to /configurations/default/env.yml
and add your Auth0 credentials. If you're running locally (for testing or development) you don't need to use Auth0. Just comment out the Auth0 lines and it should work. You'll also need some tile URLs for Leaflet. The default Mapbox URLs require an access key. If you're at Conveyal, you can grab these keys and other settings from our se-configurations repository on Github.
First make sure you're running the latest Node and NPM. For example, on a Mac using Homebrew:
$ brew update
$ brew upgrade node
Then build and start the scenario editor:
$ npm install && npm start
FAQs
Conveyal's tool for editing land use/transportation scenarios.
The npm package @conveyal/analysis-ui receives a total of 5 weekly downloads. As such, @conveyal/analysis-ui popularity was classified as not popular.
We found that @conveyal/analysis-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.