
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
pelias-whosonfirst
Advanced tools
Pelias is a geocoder powered completely by open data, available freely to everyone.
Local Installation · Cloud Webservice · Documentation · Community Chat
pelias-whosonfirst is a tool used for importing data from the Who's On First project from local files into a Pelias ElasticSearch store.
Node.js is required.
See Pelias software requirements for required and recommended versions.
It's strongly recommended that you set at least the countryCode parameter
in pelias.json before importing, to reduce the amount of data downloaded.
To install the required Node.js module dependencies, download data for the entire planet (25GB+) and execute the importer, run:
npm install
npm run download
npm start
This importer is configured using the pelias-config module.
The following configuration options are supported by this importer.
imports.whosonfirst.countryCodeUse countryCode to configure which country-specific download files to use, saving significant disk space and bandwidth. Can be set to either a single two digit ISO 3166-1 country code, or an array of multiple country codes.
For all valid download options, see the Geocode Earth Who's on First data downloads.
imports.whosonfirst.datapathFull path to where Who's on First data is located (note: the included downloader script will automatically place the WOF data here, and is the recommended way to obtain WOF data)
imports.whosonfirst.importPlaceSet to a WOF ID or array of IDs to import data only for descendants of those records, rather than the entire planet.
You can use the Who's on First Spelunker or the source_id field from any WOF result of a Pelias query to determine these values.
imports.whosonfirst.importPostalcodestrueSet to true to enable importing postalcode records. There are over 3 million postal code records.
imports.whosonfirst.maxDownloads4The maximum number of files to download simultaneously. Higher values can be faster, but can also cause donwload errors.
imports.whosonfirst.dataHosthttps://data.geocode.earth/wof/distThe location to download Who's on First data from. Changing this can be useful to use custom data, pin data to a specific date, etc.
The download script will download the required SQLite databases into the datapath configured in imports.whosonfirst.datapath.
To install the required node module dependencies and run the download script:
npm install
npm run download
## or
npm run download -- --admin-only # to only download hierarchy data, without postalcodes
This importer supports most of the major placetypes in the Who's on First project
Primarily it supports hierarchy data to represent things like cities, countries, counties, boroughs, etc.
Additionally this importer can bring in postal code data.
Currently, the supported hierarchy types are:
Other types may be included in the future.
This project exposes a collection of Node.js functionality for dealing with Who's on First data and metadata files:
isActiveRecord: rejects records that are superseded, deprecated, or otherwise inactiveisNotNullIslandRelated: rejects Null Island and other records that intersect it (currently just postal codes at 0/0)recordHasIdAndProperties: rejects Who's on First records missing id or propertiesrecordHasName: rejects records without namesconformsTo: filter Who's on First records on a predicate (see lodash's conformsTo for more information)SQLiteStream: provides a Node.js Stream of Who's on First records from a SQLite databasetoJSONStream: a Node.js stream to convert SQLite records to JSONFAQs
Importer for Who's on First
The npm package pelias-whosonfirst receives a total of 1,860 weekly downloads. As such, pelias-whosonfirst popularity was classified as popular.
We found that pelias-whosonfirst demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.