
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Find the way from A to B on a Leaflet map. The plugin supports multiple backends:
L.Routing.MapboxGo to the Leaflet Routing Machine site for more information, demos, tutorials and more.
Leaflet Routing Machine is in many ways already a feature complete routing UI. Most likely, your requirements are already covered and require very little adaptation.
For questions and discussions, you might want to look at the Leaflet Routing Machine gitter.
npm install
This requires Node and npm.
via npm/yarn (the preferred way):
npm install --save leaflet-routing-machine
Please Note: If you want to use osrm-text-instructions for routing instructions, you need to add it as a dependency yourself
npm i --save osrm-text-instructions
var L = require('leaflet');
require('leaflet-routing-machine');
// or, if you prefer modern ES6 imports
import * as L from 'leaflet';
import 'leaflet-routing-machine';
...
alternatively, if you do not use a bundler:
Download latest release, or obtain the latest release via unpkg.com.
<link rel="stylesheet" href="https://unpkg.com/leaflet-routing-machine@3.2.12/dist/leaflet-routing-machine.css" />
<script src="https://unpkg.com/leaflet-routing-machine@3.2.12/dist/leaflet-routing-machine.js"></script>
Please note: From v4 this will not include osrm-text-instructions anymore so you need to configure your own language mapping or stay on v3
LRM attaches itself onto L.
Go to the Leaflet Routing Machine site for more information, demos, tutorials and more.
FAQs
Routing for Leaflet
We found that clrm-next demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.