
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
dirty-reprojectors
Advanced tools
Quick and dirty re-projections to trick your web maps out of web mercator.
npm install -g dirty-reprojectors
cat input.geojson | dirty-reproject --forward PROJECTION [--reverse PROJECTION=mercator] > output.geojson
Example: to reproject some geojson so that web mapping libraries will render it looking like 'albersUsa':
cat input.geojson | dirty-reproject --forward albersUsa > output.geojson
For a list of supported projections, dirty-reproject --list
Reprojects the given geometry coordinate array in place, with
unprojectable points or degenerate geometries removed. If both
options.forward and options.reverse are supplied, then forward is
performed first.
Parameters
options Object
options.forward (Function | string)? The forward projection to use.options.reverse (Function | string)? The reverse projection to use.options.projections Object? A map of named projections to use. If provided, then string values of options.forward or options.reverse will be used as keys to look up the projection function in options.projections. For an extensive list provided by d3-geo-projection, use require('dirty-reprojectors/projections').coordinates ArrayTake, for example:
cat input.geojson | dirty-reproject --forward albersUsa > output.geojson
What this actually does is:
input.geojson from WGS 84 (longitude/latitude) into albersUsa, with the target coordinates scaled to match the dimensions of Web Mercator.The main catch is that if you actually look at the longitude/latitude
coordinates in output.geojson, they are totally wrong. (There are other,
subtler catches, too, having to do with Web Mercator's limited latitude range,
varying loss of precision, and probably many other nuances I am not aware of.)
FAQs
make different projections
We found that dirty-reprojectors demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.