
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
The WCS Map Component is a React component that provides a map interface for displaying and interacting with data from the WCS. The component is built using the ArcGIS Maps SDK for JavaScript and provides a variety of features for interacting with the map and the data displayed on it. It is intended to be included as a library in other projects and used to interact with the WCS's CMS.
Development began on this project in Q2 2022 and is ongoing, with new feature being released periodically at the request of the WCS's Convservation Technology team. The project is developed and maintained by ICA and is intended to be used exclusively by the WCS.
For a detailed list of features, see the official documentation.
The project uses the following branching strategy:
main
- The main branch where the source code of HEAD always reflects a production-ready state. This branch is used for deployment to npm and the live demo site.develop
- The default branch where the source code of HEAD always reflects a state with the latest delivered development changes for the next release. This branch is used for deployment to the QA environment.feat/feature-name
- Feature branches are used to develop new features for the upcoming or a distant future release. When starting development on a feature, the branch is created from the develop
branch. Feature branches should be merged back into the develop
branch when the feature is complete using a pull request. Use of rebase is mandatory for merging feature branches.fix/fix-name
- Bugfix branches are used to fix bugs from the develop
or main
branch. When starting development on a bugfix, the branch is created from the corresponding branch. Bugfix branches should be merged back into the origin branch when the fix is complete using a pull request. Use of rebase is mandatory for merging bugfix branches.The project uses ESLint and Prettier for code style and formatting. The configuration is based on the Airbnb style guide. The project uses Husky and Lint-Staged to run ESLint and Prettier on staged files before committing.
Testing for this project is done manually. Automated testing is not implemented at this time. There is a QA environment where the project is deployed for testing. There are custom events that can be triggered from the browser console to test the different features of the map component.
The project is deployed to npm as a library manually when a new version is ready for release. The project is deployed to the QA environment as a standalone site using the library automatically using Azure Pipelines when changes are merged into the develop
branch. The QA environment is hosted on an Azure App Service.
npm install
npm run dev
http://localhost:5173
in your browser.package.json
and in the codebase.npm run build
npm publish
npm run build:qa
npm run serve
docker build -t wcsmap .
docker run -p 80:80 wcsmap
http://localhost
in your browser.This project is licensed to the Wildlife Conservation Society under the terms of its contract with ICA. Unauthorized use, reproduction, or distribution is strictly prohibited.
FAQs
WCS Map Component, developed by ICA
The npm package wcsmap-v2 receives a total of 0 weekly downloads. As such, wcsmap-v2 popularity was classified as not popular.
We found that wcsmap-v2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.