
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
esri-module-loader
Advanced tools
This package is based on esri-loader.
npm i -S esri-module-loader
import { loadModules } from 'esri-module-loader'
A module value can be:
{ name: 'Map', path: 'esri/map' }
'your/path/to/module'
, which will be converted into { name: 'module', path: 'your/path/to/module' }
'Map'
loadModules(moduleValue).then(Module => {})
To load multiple modules, you need an array of module values, like:
const modules = [
'esri/Color', // use last word as the module name
'Map', // by defined shortcut name
{ name: 'Graphic', path: 'esri/graphic' } // or you can specify your module name
]
loadModules(modules).then(({ Graphic, Map, Color }) => {
// loaded modules returned as an object mapping
// use your loaded modules here
})
needs extra dojo config:
loadModules(
[{ name: 'MyModule', path: 'my/Module'}],
{ dojoConfig: { packages: [ name: 'my', location: '/path/to/my' ] } }
).then(({ MyModule }) => {})
You can add your own shortcuts:
import { loadModules, shortcuts } from 'esri-module-loader'
shortcuts.add('Map', 'esri/map')
shortcuts.add({ name: 'Map', path: 'esri/map' })
shortcuts.add([{ name: 'Map', path: 'esri/map' }, { name: 'Color', path: 'esri/Color' }])
loadModules(['Map', 'Color']).then(({ Map, Color}) => {
// ...
})
Most of esri official modules have been already added into the shortcuts. You can check the module list
import { loadModules, config } from 'esri-module-loader'
config({
url: 'https://js.arcgis/com/4.8'
})
loadModules('Map').then(Map => {
// this is esri/Map from 4.8 api
})
loadModules('Map', {
url: url: 'https://js.arcgis/com/4.9' // this will override default loader options
}).then(Map => {
// this is esri/Map from 4.9 api
})
FAQs
a helper to load esri modules
The npm package esri-module-loader receives a total of 0 weekly downloads. As such, esri-module-loader popularity was classified as not popular.
We found that esri-module-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.