
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
maplibre-google-maps
Advanced tools
Using this plugin you can add Google Maps layers to MapLibre GL JS.
To install dependency use the following NPM command:
npm install maplibre-google-maps
The libary includes two functions:
googleProtocol - protocol handler that needs to be passed to maplibregl.addProtocol with google as the protocol namecreateGoogleStyle - function to create an instance map style; it accepts 3 arguments:
id - source id; can be any stringmapType - type of the map; roadmap and satellite are supportedkey - Google API key with Map Tiles API enabledUsage example:
import { googleProtocol, createGoogleStyle } from 'maplibre-google-maps';
maplibregl.addProtocol('google', googleProtocol);
const map = new maplibregl.Map({
container: 'map',
style: createGoogleStyle('google', 'roadmap', 'YOUR_GOOGLE_KEY'),
});
You need to replace YOUR_GOOGLE_KEY with your Google API key with Map Tiles API enabled. For more information check the official Google documentation.
FAQs
MapLibre Google Maps plugin
We found that maplibre-google-maps demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.