
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
heremap-node
Advanced tools
Set of node.js interfaces to HERE Maps REST APIs
npm install heremap-node
const heremap = require("heremap-node");
// your own credentials, to be obtained from developer.here.com
// by default, use production environemnt you may specify cit:true to use CIT
heremap.config({
app_id: "YOUR APP_ID", app_code: "YOUR APP_CODE"
});
const res = await heremap.geocode("avenue des champs elysees, Paris");
console.log(res); // return {coord, body, respTime}
const addresses = [
"avenue des champs-elysees, Paris",
"Versailles, France",
"Bordeaux,France",
];
// Array of promises from geocoder
const promises = addresses.map(addr => heremap.geocode(addr));
// wait for all geocodes to be performed
const result = await Promise.all(promises);
// get array of coords
const coords = result.map(resp => resp.coord);
const res = await heremap.reverseGeocode([48.3,2.3]);
console.log(res); // return {location, address, body, respTime}
const waypoints = [
"avenue des champs-elysees, Paris",
"Versailles, France",
"Bordeaux,France",
];
const promises = waypoints.map(addr => heremap.geocode(addr)); // Array of promises from geocoder
const result = await Promise.all(promises); // wait for all geocodes to be performed
const coords = result.map(resp => resp.coord); // extrct coords
const start = coords.shift(); // get start points and remove from list of waypoints
const resp = await heremap.route(start, coords); // compute the route
console.log(result); // return {summary, route, body, respTime
// Addresses are geocoding in parallel, and then first one is used as start point, all other as end points
const addresses = [
"8 rue Benjamin Franklin Paris",
"Perpignan, france",
"Vannes, france",
"Lyon,France",
"Marseille,France",
"Versailles,France"
];
const opt= {
mode: "fastest;car;traffic:enabled"
};
const promises = addresses.map(addr => heremap.geocode(addr)); // array of promises
const result = await Promise.all(promises); // awaits all promises (geocodes) to be performed
const coords = result.map(resp => resp.coord); // get array of coords
const start = coords.shift(); // extract start point
const result = await heremap.matrix(start, coords, opt); // does matrix routing
console.log(result); // return {entries, body, respTime}
// area to reach in 10mn drive with traffic
let opt = {
start:[48.3,2.3],
rangeType: "time",
range: 10*60,
mode: 'fastest;car;traffic:disabled'
}
let res = await heremap.isoline(opt);
console.log(res); // return { poly, body, respTime}
// area to reach in 2km walk
opt = {
start:[48.3,2.3],
rangeType: "distance",
range: 2,
mode: 'fastest;pedestrian'
}
res = await heremap.isoline(opt);
console.log(res); // return { poly, body, respTime}
// from which area can I reach the point in 30min truck
opt = {
destination:[48.3,2.3],
rangeType: "time",
range: 30*60,
mode: 'balancd;truck'
}
res = await heremap.isoline(opt);
console.log(res); // return { poly, body, respTime}
/* returns {reference,waypoints}
reference = {start,stop,distance, time}
for the whole trip
waypoint = [{coord,distA,distB},...]
coord: of waypoint
distA : from start to waypoint
distB : from waypoint to end}
*/
const start = [48.3,2.3];
const stop = [,];
const waypoints = [
[,],
[,],
[,]
]
const res = await heremap.detour(start,stop,waypoints);
console.log(res);
FAQs
node interface to HERE maps REST API
We found that heremap-node demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.