
Product
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies
A safer, faster way to eliminate vulnerabilities without updating dependencies
@openstreetmap/id-tagging-schema
Advanced tools
This is the directory of OpenStreetMap tagging data used by the iD editor. It includes presets, fields, deprecations, and more.
OpenStreetMap itself does not have a formal rigid database schema, but relies on a tagging folksonomy instead. Editing tools need to know how tags are used in order to facilitate mapping. This Tagging Schema fills that need, but with a number of caveats:
English translations for the terms-key should be added to the JSON data (Example).
Apart from that, translations are managed in the Transifex Project of the iD Editor inside the translation resource 'preset'.
To translate, you can open the translation page, select a language, select 'preset' and search for key:living_street or translation_text:'Living Street' to find and change translations.
To contribute to a language: Select a language and use 'Join team' to request access. The administrators will approve requests routinely, only rejecting requests for overly specific locales.
All translation changes will be released whenever a new id-tagging-schema release is created. They will be visible inside iD and other editors once those editors update their dependencies and release a new version as well.
The westnordost/osmfeatures project, a component of StreetComplete, makes it easier to use this data with Android or other Java platforms.
iD's code of conduct and privacy policy also apply to this project.
Documentation for the data formats is located with the schema-builder
package, which is the technical basis of this project. To make a change, update a
file within the data folder and rebuild by running npm run build in your terminal.
FAQs
The OpenStreetMap tagging model used by the iD editor
We found that @openstreetmap/id-tagging-schema demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies

Product
Reachability analysis for Ruby is now in beta, helping teams identify which vulnerabilities are truly exploitable in their applications.

Research
/Security News
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.