
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@gooin/yzt-datavis-mapbox
Advanced tools
主要功能:
mapbox 原生、deck.gl、antV-L7、THREE 不同可视化图层加载,最终返回一个 MapBox 的 Layer ,用于添加到地图中mapbox 原生、deck.gl、antV-L7 不同图层加载
mapbox 原生deck.glantV-L7 因为图层加载在其内建的Scene对象中,需要额外处理THREE 以 mapbox 的 custom-layer 方式不同库的大部分图层都支持
GeoJSON数据,但是个别的图层所需数据格式不尽相同,需要统一数据入口的数据结构,内部做转换以适配不同的库
yarn add git地址...
import { ArcLayer,GeoJsonLayer } from 'fantasy-datavis-mapbox';
import mapboxgl from 'mapbox-gl';
mapboxgl.accessToken = 'pk.eyJ1IjoiZ29vaW4iLCJhIjoiY2ppY3RjcGd5MDRqcjNrbWFlanEyazk2OCJ9.-v6OvStrPvVwu2-Tx9Uogg';
const AIR_PORTS =
'https://d2ad6b4ur7yvpq.cloudfront.net/naturalearth-3.3.0/ne_10m_airports.geojson';
let map = new mapboxgl.Map({
container: 'map',
style: 'mapbox://styles/mapbox/streets-v9',
center: [0.45,51.47],
zoom: 4,
pitch: 30,
bearing:0
});
const myArcLayer = ArcLayer({
id: 'arcs1',
data: AIR_PORTS,
dataTransform: d =>
d.features.filter(f =>
f.properties.scalerank < 4),
// // Styles
getSourcePosition: f =>
[-0.4531566, 51.4709959], // London
getTargetPosition: f =>
f.geometry.coordinates,
getSourceColor: [0, 128, 200, 100],
getTargetColor: [200, 0, 80, 150],
getWidth: 2
});
const myJsonLayer = GeoJsonLayer({
id: "geojson",
data: AIR_PORTS,
onClick: info =>
// eslint-disable-next-line
info.object && alert(`extra fun=> ${info.object.properties.name} (${info.object.properties.abbrev})`)
});
map.addLayer(myArcLayer);
map.addLayer(myJsonLayer);
FAQs
manage deck.gl,antV-L7,THREE datavis layers for mapbox
We found that @gooin/yzt-datavis-mapbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.