
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
places.js
Advanced tools
Algolia Places provides a fast, distributed and easy way to use an address search autocomplete JavaScript library on your website.
See the website for more information.
Read the blog post introducing Algolia Places.
Fill the Google form to report any irrelevant results.
Watch more examples on the website.
To use Algolia Places, all you need is an <input> and some JavaScript code that will load
and use the places.js library.
<script>Our JavaScript library is available on the jsDelivr CDN and also on cdnjs.
<script src="https://cdn.jsdelivr.net/npm/places.js@1.19.0"></script>
Here's a small example using it:
<input type="search" id="address-input" placeholder="Where are we going?" />
<script>
var placesAutocomplete = places({
appId: <YOUR_PLACES_APP_ID>,
apiKey: <YOUR_PLACES_API_KEY>,
container: document.querySelector('#address-input')
});
</script>
Algolia Places is also available on npm.
Install the module:
npm install places.js --save
Put an <input> in your html page:
<input type="search" id="address-input" placeholder="Where are we going?" />
Initialize the places.js library:
var places = require('places.js');
var placesAutocomplete = places({
appId: <YOUR_PLACES_APP_ID>,
apiKey: <YOUR_PLACES_API_KEY>,
container: document.querySelector('#address-input')
});
Full documentation is available on the Algolia Places website.
Wanna contribute? Awesome, please read the contributing guide.
FAQs
🌐 Turn any into an address autocomplete.
The npm package places.js receives a total of 23,764 weekly downloads. As such, places.js popularity was classified as popular.
We found that places.js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 67 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.