
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@ngageoint/gars-js
Advanced tools
The GARS Library was developed at the National Geospatial-Intelligence Agency (NGA) in collaboration with BIT Systems. The government has "unlimited rights" and is releasing this software to increase the impact of government investments by providing developers with the opportunity to take things in new directions. The software use, modification, and distribution rights are stipulated within the MIT license.
If you'd like to contribute to this project, please make a pull request. We'll review the pull request and discuss the changes. All pull request contributions to this project will be released under the MIT license.
Software source code previously released under an open source license and then modified by NGA staff is considered a "joint work" (see 17 USC § 101); it is partially copyrighted, partially public domain, and as a whole is protected by the copyrights of the non-government authors and must be released according to the terms of the original open source license.
GARS is a Javascript library providing Global Area Reference System functionality, a standardized geospatial reference system for areas.
Default grid properties including zoom ranges, styles, and labelers are defined in gars.properties. The defaults can be changed in code by modifying the Grids.
const gars = GARS.parse('006AG39');
const point = gars.toPoint();
const pointMeters = point.toMeters();
const latitude = 63.98862388;
const longitude = 29.06755082;
const point2 = Point.point(longitude, latitude);
const gars2 = GARS.fromPoint(point2);
const garsCoordinate = gars2.toString();
const gars30m = gars2.coordinate(GridType.THIRTY_MINUTE);
const gars15m = gars2.coordinate(GridType.FIFTEEN_MINUTE);
const gars5m = gars2.coordinate(GridType.FIVE_MINUTE);
See gars-android for a concrete example
// GridTile tile = ...;
const grids = Grids.create();
const zoomGrids = grids.getGrids(tile.getZoom());
if (zoomGrids && zoomGrids.hasGrids()) {
for (const grid of zoomGrids) {
const lines = grid.getLinesFromGridTile(tile);
if (lines) {
for (const line of lines) {
const pixel1 = line.getPoint1().getPixelFromTile(tile);
const pixel2 = line.getPoint2().getPixelFromTile(tile);
// Draw line
}
}
const labels = grid.getLabelsFromGridTile(tile);
if (labels) {
for (const label of labels) {
const pixelRange = label.getBounds()!.getPixelRangeFromTile(tile);
const centerPixel = label.getCenter()!.getPixelFromTile(tile);
// Draw label
}
}
}
}
1.0.0 (09-29-2022)
FAQs
GARS Javascript
We found that @ngageoint/gars-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.