
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
mqtt2swissmeteo
Advanced tools
This node.js application is a bridge between the MeteoSwiss service and a mqtt broker. The bridge can publish the latest weather data from the service to the target mqtt broker. The source data is updated every 15 minutes.
This node.js application is installed from the npm repository and executed with the node command. It will load the default configuration file config.json.
npm install -g mqtt2swissmeteo
node /usr/local/bin/mqtt2swissmeteo
Alternatively, the module can be executed as a docker container. Use the following Dockerfile to build a container by injecting the config file.
FROM node:alpine
RUN npm install -g mqtt2swissmeteo
COPY config.json /etc/mqtt2swissmeteo.json
ENTRYPOINT [ "/usr/local/bin/mqtt2swissmeteo", "/etc/mqtt2swissmeteo.json" ]
The following configuration file is an example. Please replace the desired values like the mqtt url and add the MeteoSwiss weather station. A list of weather stations can be found here: MeteoSwiss Weather Stations.
{
"log": "debug",
"mqtt": {
"url": "mqtt://192.168.1.10",
"name": "swissmeteo",
"secure": false
},
"swissmeteo": {
"pollIntervalSec": 60,
"weatherStation": {
"id": "KLO",
"name": "Zürich Kloten"
}
}
}
Every 15 minutes, the data from MeteoSwiss is updated. As the updated data was
loaded, it will publish the values as dedicated topics to MQTT. The following
topics are be published for the station Zürich Kloten. The latest value is in
the JSON payload field val.
swissmeteo/temperature/Zürich Kloten°C.swissmeteo/precipitation10Min/Zürich Klotenmm.swissmeteo/sunshine10Min/Zürich Klotenmin.swissmeteo/radiation10Min/Zürich KlotenW/m².swissmeteo/humidity/Zürich Kloten%.swissmeteo/dewPoint/Zürich Kloten°C.swissmeteo/windDirection10Min/Zürich Kloten°.swissmeteo/windSpeed10Min/Zürich Klotenkm/h.swissmeteo/gustPeak10Min/Zürich Klotenkm/h.swissmeteo/pressureAbsolute/Zürich KlotenhPa.swissmeteo/pressureRelative/Zürich KlotenhPa.The swiss Federal Office of Meteorology and Climatology MeteoSwiss provides the data in an open api. The api description and links to the latest data:
FAQs
Node.js based interface between MQTT and Swiss Meteo for a smart home
The npm package mqtt2swissmeteo receives a total of 4 weekly downloads. As such, mqtt2swissmeteo popularity was classified as not popular.
We found that mqtt2swissmeteo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.