Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Tools for improving web maps. The centerpiece of the code is a client implementation of the MBTiles interaction specification.
wax.tooltip
wax.legend
wax.ol.Interaction
wax.ol.Legend
wax.ol.Embedder
wax.ol.Switcher
wax.g.Controls
wax.g.MapType
wax.g.mapBoxLogo
.interaction()
.zoomer()
.legend()
.fullscreen()
.zoombox()
.hash()
jquery.jsonp-2.1.4.js
, from jquery-jsonpThe main usage of mapping frameworks through Wax is via records. Records are pure JSON objects that have a 1:1 representation with function Javascript code, but, unlike imperative code, can be stored and manipulated as configuration. Records are tested with polymaps, openlayers, Modest Maps and Google Maps API v3, but the system (/lib/record.js
) is generalized beyond mapping tools of any sort, to exist as a basic Javascript AST interpreter.
Currently records support several control techniques:
@new
instantiates objects@chain
runs functions, changing the value of this
with each run@inject
runs a function in a @chain
without changing the reference to this
@call
runs a function from the global scope changing the value of this
@literal
allows an object attribute to be referenced@group
runs a set of record statements (e.g. using the keywords above) in orderThese techniques (with arbitrary levels of nesting), are sufficient to construct maps in each mapping framework.
Samples of usage can be found in examples/. These depend on localizing copies of each API code.
To set up the examples first run:
make ext
Then check out the example html files.
For wax users, a minified library is already provided in build/.
But for developers you can rebuild a minified library by running:
make build
Install mainline UglifyJS:
npm install https://github.com/mishoo/UglifyJS/tarball/master
Make the combined & minified OpenLayers & Google Maps libraries:
rm -r build
make build
Wax uses docco for documention. Install it like:
npm install docco
Make the docs:
make doc
Wax includes two libraries in /lib
which are included in builds
boxselect
including removability..boxselect(function())
.zoombox()
and hash()
controls for Modest Maps.Controls
object are now lowercase.WaxProvider
's signature: now takes an object of settings and supports multiple domains, filetypes and zoom restrictions.wax.g.MapType
's signature: now accepts an object of settings in the same form as WaxProvider
.interaction()
now supports clicks, with the same clickAction
setting as the OpenLayers version..fullscreen()
sizing./examples
directory: examples will be in manuals..legend()
, .interaction()
, .fullscreen()
, and .zoomer()
controls for Modest Maps.addedTooltip
event to tooltip.js
to allow for external styling code.addedtooltip
event for binding/extending tooltip behavior. Subject to change.make ext
added for downloading and installing external libraries needed to use examples.1.4.2
FAQs
Tools for improving web maps.
The npm package wax receives a total of 17 weekly downloads. As such, wax popularity was classified as not popular.
We found that wax demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.