
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
leaflet-nectarivore
Advanced tools
Leaflet plugin to create layers based on remote services (Overpass, Osmose, etc.)
Leaflet Nectarivore is a plugin to create layers based on remote services (Overpass, Osmose, etc.). Its name is a nod to Leaflet Omnivore, which eats several kind of files to display informations on a Leaflet map. Leaflet Nectarivore gathers nectar from remote services to create its layers on the map.
The first two supported services are Overpass and Osmose. See the demo pages here:
$ npm install leaflet-nectarivore
import Nectarivore from 'leaflet-nectarivore';
const attributions = [
'Map data © <a href="https://openstreetmap.org">OpenStreetMap</a> contributors',
'POI via <a href="https://www.overpass-api.de">Overpass API</a>',
];
const tileLayer = new L.TileLayer(
'http://{s}.tiles.wmflabs.org/bw-mapnik/{z}/{x}/{y}.png',
{ attribution: attributions.join(', ') }
);
const overpassLayer = Nectarivore.overpass({
minZoom: 15,
endPoint: 'https://overpass-api.de/api',
query: 'node({{bbox}})["amenity"="post_box"];out;',
});
const map = new L.Map('my-map')
.addLayer(tileLayer)
.addLayer(overpassLayer)
.setView(L.latLng(44.84061, -0.5724), 15);
In order to get a valid query the Overpass-turbo IDE might help.
import Nectarivore from 'leaflet-nectarivore';
const attributions = [
'Map data © <a href="https://openstreetmap.org">OpenStreetMap</a> contributors',
'POI via <a href="http://wiki.openstreetmap.org/wiki/Osmose">Osmose API</a>',
];
const tileLayer = new L.TileLayer(
'http://{s}.tiles.wmflabs.org/bw-mapnik/{z}/{x}/{y}.png',
{ attribution: attributions.join(', ') }
);
const osmoseLayer = L.Nectarivore.osmose({
minZoom: 15,
endpoint: 'https://osmose.openstreetmap.fr/api/0.2',
language: 'en',
item: 8120,
status: 'open',
});
const map = new L.Map('my-map')
.addLayer(tileLayer)
.addLayer(osmoseLayer)
.setView(L.latLng(44.84061, -0.5724), 15);
{
debug: false,
minZoom: 15,
endpoint: '',
loadedBounds: [],
markerIcon: null,
timeout: 30 * 1000, // Milliseconds
retryOnTimeout: false,
noInitialRequest: false,
beforeRequest: function() {},
afterRequest: function() {},
onSuccess: function(data) {},
onError: function(xhr) {},
onTimeout: function(xhr) {},
}
{
endpoint: 'https://overpass-api.de/api',
query: `(
node({{bbox}})[organic];
node({{bbox}})[second_hand];
);
out qt;`
}
{
endpoint: 'https://osmose.openstreetmap.fr/api/0.2',
language: 'en'
}
$ git clone git@github.com:osmlab/leaflet-nectarivore.git leaflet-nectarivore
$ cd leaflet-nectarivore
$ npm install
$ npm run watch
$ npm version patch -m "release: %s"
$ npm publish
npm version
tests the code and build it. Then it upgrades the package version number according to the used keyword (patch, minor or major) and commit the modifications in Git (with a proper version tag). Finally, it pushes it to repository with the tag.
Please do!
All the plugin logic is in the services/baseService.js
file. It is then extended by the service logic by creating specific fies in the services
folder.
So in order to add another service you have to:
services
folder by duplicating overpass.js
or osmose.js
.service/index.js
file.services/__tests__
folder.docs
folder.README.md
fileFAQs
Leaflet plugin to create layers based on remote services (Overpass, Osmose, etc.)
The npm package leaflet-nectarivore receives a total of 3 weekly downloads. As such, leaflet-nectarivore popularity was classified as not popular.
We found that leaflet-nectarivore demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.