
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
@vcmap/plugin-cli
Advanced tools
The vcmplugin cli helps develop and build plugins for the vcMAP.
For more information on plugin development refer to map plugin examples, which provides documentations and a tutorial on plugin development.
You need nodejs and npm installed on your system to use this tool.
To install in your project:
npm i -D @vcmap/plugin-cli
To install globally:
npm i -g @vcmap/plugin-cli
To create a new plugin template, run the following within your projects root:
vcmplugin create
This will open a command prompt helping you to create the basic structure of a plugin.
To serve your project, run the following within your projects root:
vcmplugin serve --vcm <url|directory>
This will launch a dev server at localhost:8080 using the specified VC MAP application as its base. You can either specify a directory or a URL to an application.
# using a directory
vcmplugin serve --vcm /home/vcs/virtualcityMAP
# using a URL
vcmplugin serve --vcm https://berlin.virtualcitymap.de
To build your project, run the following from within your projects root:
vcmplugin build
To pack your project for productive use, run the following from within your projects root:
vcmplugin pack
This will create a folder dist with a zip file containing your bundled code and assets.
To use the plugin productively in a hosted map, unzip this file on your server to {vcm-root}/plugins and add an entry to your VC MAP config plugins section.
If you only use the vcmplugin-cli as a package dependency, you must add the above scripts to
the package.json and use npm run to execute:
{
"name": "plugin-name",
"main": "src/index.js",
"scripts": {
"build": "vcmplugin build",
"serve": "vcmplugin serve --vcm ./vcm"
},
"devDependencies": {
"vcmplugin-cli": "^0.1.1"
}
}
The legacy case was not as strict regarding the projects package.json. This approach relies
more heavily on a) the precense of a package.json and b) the validity of said package.json. For
instance the plugin name is directly derived from the name field in the package.json as is the
entry point from main. You can still provide name as a CLI argument and src/index.js is still
used, if main is missing from the package.json. This is do to change.
FAQs
A CLI to help develop and build plugins for the VC Map
The npm package @vcmap/plugin-cli receives a total of 25 weekly downloads. As such, @vcmap/plugin-cli popularity was classified as not popular.
We found that @vcmap/plugin-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.