Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@otovo/tetris-3d
Advanced tools
This repository contains a react implementation using Cesium. It will only work in Otovo context.
This repository contains a react implementation using Cesium. It will only work in Otovo context.
Install yarn if not installed yet. Enter the root folder and run yarn.
yarn
Copy dev-template.env
and rename it to .env
. Then, log into your account on Cesium, select the assets you would like to test and copy the IDs to the
environement file.
To run the local server:
yarn dev
To make the package ready for publishing, you first have to run
yarn build
This creates css and build files in the dist
folder, which you export as a package.
To check the implementations locally you can use yalc.
To publish the package with yalc use this command.
yalc publish
In the project you want to test it, you can do that with the command
yalc add @otovo/tetris-3d@x.x.x
Where the @x.x.x
is the version number specified in package.json
.
Remember to remove the yalc configuration in the other package after local testing.
yalc remove @otovo/tetris-3d@x.x.x
To properly publish a new version use npm. Make sure you have an Otovo account.
npm publish
Cesium is a geospatial platform for 3D maps. We are using Cesium ion and their javascript package.
Cesium ion is a SaaS platform for creating and hosting geospatial data. Based on geotiff files it will create "assets" that is accessible via their javascript package. This means that Cesium handles a lot of the heavy lifting for us so that we don't have to create the 3D rasters ourself.
FAQs
This repository contains a react implementation using Cesium. It will only work in Otovo context.
The npm package @otovo/tetris-3d receives a total of 99 weekly downloads. As such, @otovo/tetris-3d popularity was classified as not popular.
We found that @otovo/tetris-3d demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.