
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
An extensive port of google's s2 geometry library written in TypeScript.
The library has no runtime dependencies. Cell IDs use native JavaScript bigint (v4+).
Npm package is nodes2ts.
Requires Node.js 20+.
S2CellId.id is now bigint (was Long).
// v3
import Long from 'long';
const id = new S2CellId(Long.fromString('-6533045114107854848'));
id.id.toString(); // "-6533045114107854848" (signed)
// v4 — Long import removed, signed strings still work in constructor
const id = new S2CellId('-6533045114107854848');
id.id.toString(); // "11913698959601696768" (unsigned)
id.toSignedDecimalString(); // "-6533045114107854848" (compat helper)
Other changed APIs:
| Symbol | v3 type | v4 type |
|---|---|---|
S2CellId.id | Long | bigint |
S2CellId constructor | Long | string | bigint | string |
S2CellId.fromFacePosLevel pos | Long | bigint |
S2CellId.pos() | Long | bigint |
S2CellId.lowestOnBit() | Long | bigint |
S2CellId.lowestOnBitForLevel() | Long | bigint |
S2CellId.toIJOrientation() | Long | bigint |
S2CellUnion.initFromIds() | Long[] | string[] | bigint[] | string[] |
S2CellUnion.leafCellsCovered() | Long | bigint |
See MIGRATION.md for a full migration guide and operator cheat-sheet.
This project is backed by 80+ 1-by-1 comparison tests between this implementation and the original one.
When implementing a not-yet-ported feature, please generate the needed tests by modifiying the java code within java-test-creator folder
S2Loop
S2Polygon
S2Polyline
As already mentioned the lib is almost a 1:1 porting from the java's implementation.
The only exceptions are due javascript limitations such as
The lib also exports a Utils class which contains the following:
export declare class Utils {
/**
* Calculates a region covering a circle
* NOTE: The current implementation uses S2Cap while S2Loop would be better (S2Loop is not implemented yet)
* @param center
* @param radiusInKM
* @param points the number of points to calculate. The higher the better precision
* @returns {S2Region}
*/
static calcRegionFromCenterRadius(center: S2LatLng, radiusInKM: number, points?: number): S2Region;
}
Also, for some classes, an extra toGEOJSON method is provided to let developer easily inspect boundaries of cells/points.
import { S2Cell, S2CellId, S2LatLng } from 'nodes2ts';
const cellId = S2CellId.fromPoint(
S2LatLng.fromDegrees(10 /* latitude */, 11 /* longitude */).toPoint(),
);
console.log(cellId.id); // 11532778376507094629n
console.log(typeof cellId.id); // 'bigint'
console.log(cellId.toToken()); // stable hex token
const nextCell = cellId.next();
const prevCell = cellId.prev();
const neighbors = cellId.getAllNeighbors(cellId.level());
import {
S2CellId,
signedDecimalToUnsigned,
unsignedToSignedDecimal,
} from 'nodes2ts';
const legacySigned = '-6533045114107854848';
const cell = new S2CellId(legacySigned);
console.log(cell.id); // 11913698959601696768n
console.log(cell.toSignedDecimalString()); // '-6533045114107854848'
console.log(cell.toUnsignedDecimalString()); // '11913698959601696768'
console.log(signedDecimalToUnsigned(legacySigned)); // 11913698959601696768n
console.log(unsignedToSignedDecimal(cell.id)); // '-6533045114107854848'
const legacyCell = S2CellId.fromSignedDecimalString('-6533045114107854848');
console.log(legacyCell.id); // 11913698959601696768n
console.log(legacyCell.toToken()); // same canonical token as before
const fromToken = S2CellId.fromToken('89c25c');
console.log(fromToken.id); // bigint
console.log(fromToken.toToken()); // '89c25c'
import { S2CellUnion } from 'nodes2ts';
const union = new S2CellUnion();
union.initFromIds([
0x89c25c0000000000n,
0x89c25c4000000000n,
]);
const cell = new S2Cell(cellId);
console.log(cell.toGEOJSON());
// copy the output and paste it into https://geojson.io/
The library was initially conceived to be used in both server and client env leveraging TypeScript peculiarities.
If you wish to contribute please make sure, wherever applicable, to create a tiny merge request to ease the code review of the proposed changes.
If you wish to contact the library author for business (or any other) proposal you can write an email to vekexasia
at gmail dot com.
FAQs
a Typescript porting of the great S2 Geometry library from Google
The npm package nodes2ts receives a total of 24,070 weekly downloads. As such, nodes2ts popularity was classified as popular.
We found that nodes2ts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.