Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@giscience/ohsome2x
Advanced tools
Query OSM History Data (count, length, area) about specific OSM Features or OSM User activity (user-count) for your areas of interest.
Input: Accepts GeoJSON or PostgreSQL/PostGIS as input source.
Output: Creates a GeoJSON File or new result table in your PostgreSQL/PostGIS database. The package includes a library with a single class to run.
Additionally it includes oshome2x-cli
, a command-line tool with a configuration wizard to create and run a query-configuration-JSON.
This library/tool makes use of the Ohsome-API (https://api.ohsome.org) as data backend and many other great open-source libraries.
This software is developed by HeiGIT:
For use as library in Node.js:
$ npm install @giscience/ohsome2x
To run the command-line wizard:
$ npx ohsome2x-cli
There are two ways how you can use ohsome2x.
Use it as library in another Node.js project. You find the built library in the /dist
folder after executing npm run build
Use the interactive command line interface.
Run:
$ npx ohsome2x-cli
OR
$ node ./ohsome2x-cli/ohsome2x-cli.js
{
"type": "FeatureCollection",
"features": [
{
"type": "Feature",
"properties": {"id": "Heidelberg"},
"geometry": {
"type": "Polygon",
"coordinates": [
[ [8.625984191894531, 49.38527827629032],
[8.735504150390625, 49.38527827629032],
[8.735504150390625, 49.433975502014675],
[8.625984191894531, 49.433975502014675],
[8.625984191894531, 49.38527827629032]
]]}}]}
{
"ohsomeQuery": {
"queryType": "elements/count/groupBy/boundary",
"keys": "building",
"values": "",
"types": "polygon",
"time": "2008/2020/P1Y"
},
"source": {
"geometryId": "id",
"name": "heidelberg.geojson",
"store": { "path": "heidelberg.geojson", "type": "geojson" }
},
"target": {
"horizontalTimestampColumns": false,
"createGeometry": true,
"transformToWebmercator": false,
"storeZeroValues": true,
"computeValuePerArea": true,
"name": "heidelberg_buildings_count.geojson",
"store": { "path": "heidelberg_buildings_count.geojson", "type": "geojson" }
}
}
$ npx ohsome2x-cli run --conf myquery.json
Node:
const Ohsome2X = require('@giscience/ohsome2x');
// you can create this config using the command-line wizard, run: npx ohsome2x-cli
const config = {
ohsomeQuery: {...},
source: {...},
target: {...}
}
const ohsome2x = new Ohsome2X(config);
// This will return a Promise
ohsome2x.run().catch(console.log);
TypeScript:
import Ohsome2X = require('@giscience/ohsome2x');
import {Ohsome2XConfig} from 'ohsome2x/dist/config_types_interfaces';
// you can create this config using the command-line wizard, run: npx ohsome2x-cli
const config: Ohsome2XConfig = {
ohsomeQuery: {...},
source: {...},
target: {...}
}
const ohsome2x = new Ohsome2X(config);
// This will return a Promise
ohsome2x.run().catch(console.log);
FAQs
convenience library to query ohsome-api using nodejs
The npm package @giscience/ohsome2x receives a total of 1 weekly downloads. As such, @giscience/ohsome2x popularity was classified as not popular.
We found that @giscience/ohsome2x demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.