
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
betterknown
Advanced tools
_betterknown development is supported by 🌎 [placemark.io](https://www.placemark.io/)_
betterknown development is supported by 🌎 placemark.io
I wrote wellknown, a WKT parser and stringifier, eons ago. It's still sort of popular but nobody maintained it after I left Mapbox.
There's wkx, which is stricter and honestly has a better parser, plus supports WKB, but it's also abandoned and has some drawbacks - no TypeScript, somewhat idiosyncratic code, and the bundle size is larger than it needs to be because it brings in browserify shims.
This project aims to be the combination of the two projects. Lightweight like wellknown, strict and correct like wkx, plus with the 2022 energy of supporting TypeScript from day one.
import { wktToGeoJSON, geoJSONToWkt } from "betterknown";
import proj4 from "proj4";
// Converting & reprojecting an EWKT string
wktToGeoJSON(`SRID=3857;POINT(-400004.3 60000.1)`, {
proj: proj4,
});
// Converting GeoJSON to WKT
geoJSONToWkt({
type: 'Point',
coordinates: [1, 2]
});
This specification of WKT specifies Literal Axis Order, which diverges from WKT and EWKT.
For example the input
<http://www.opengis.net/def/crs/EPSG/0/4326> Point(33.95 -83.38)
Produces this GeoJSON, with flipped coordinate order.
{
"coordinates": [-83.38, 33.95],
"type": "Point",
}
The behavior of Betterknown in this situation is:
http://www.opengis.net/def/crs/EPSG/0/4326, then we flip coordinates.proj method, and
you're in charge of reprojection and flipping coordinates: the proj method will receive
the IRI string. Note that proj4 does not support the IRI-style projection URLs,
so you'll have to include custom code here. An example of using proj4 with these URLs
is listed below.FAQs
_betterknown development is supported by 🌎 [placemark.io](https://www.placemark.io/)_
The npm package betterknown receives a total of 0 weekly downloads. As such, betterknown popularity was classified as not popular.
We found that betterknown demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.