
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@opensystemslab/map
Advanced tools
[](http://npm.im/@opensystemslab/map)
A library of Web Components for tasks related to addresses and planning permission in the UK built with Lit, Vite, and Ordnance Survey APIs.
Web map
<my-map />
is an OpenLayers-powered map to support drawing and modifying red-line boundaries. Other supported modes include: highlighting an OS Feature that intersects with a given address point; clicking to select and merge multiple OS Features into a single boundary; and displaying static point or polygon data. Events are dispatched with the calculated area and geojson representation when you change your drawing.
Postcode search
<postcode-search />
is a GOV.UK-styled input that validates UK postcodes using these utility methods. When a postcode is validated, an event is dispatched containing the sanitized string.
Address autocomplete
<address-autocomplete />
fetches addresses in a given UK postcode using the OS Places API and displays them using GOV.UK's accessible-autocomplete component. An event is dispatched with the OS record when you select an address.
These web components can be used independently or together following GOV.UK's Address lookup design pattern.
Find these components in the wild, including what we're learning through public beta user-testing, at https://www.ripa.digital/.
.env.example
to .env.local
and replace the values - or simply provide your API keys as propsnpm i pnpm -g
pnpm i
pnpm dev
Unit tests are written with Vitest, Happy Dom, and @testing-library/user-event. Each component has a main.test.ts
file.
pnpm test
starts vitest
in watch modepnpm test:ui
opens Vitest's UI in the browser to interactively explore logs https://vitest.dev/guide/ui.htmlWe use Pitsby for documenting our web components. It's simple to configure (pitsby.config.js
plus a *.doc.js
per component), has good support for vanilla web components, and an interactive playground.
pnpm run docs
starts Pitsby in watch mode for local developmentpnpm run docsPublish
builds the site so Netlify can serve it from pitsby/
This repository is licensed under the Open Government License v3.
[0.8.3] - 2024-06-28
role
to the map container div of either application
if interactive or presentation
if implemented in static mode (#454)FAQs
[](http://npm.im/@opensystemslab/map)
We found that @opensystemslab/map demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.