Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Dash Leaflet is a light wrapper around React-Leaflet. The syntax is similar to other Dash components, with naming conventions following the React-Leaflet API.
Dash Leaflet is a light wrapper around React-Leaflet. The syntax is similar to other Dash components, with naming conventions following the React-Leaflet API.
The easiest way to get started is to install the latest version of Dash and Dash Leaflet via pip.
pip install dash
pip install dash-leaflet
Once the installation is completed, paste the following lines of code into a .py file and run it.
from dash import Dash
import dash_leaflet as dl
app = Dash()
app.layout = dl.Map(dl.TileLayer(), style={'height': '50vh'}, center=[56, 10], zoom=6)
if __name__ == '__main__':
app.run_server()
That's it! If you visit http://127.0.0.1:8050/ in your browser, you should see a Leaflet map.
The documentation has been moved to a separate page to enable an interactive example gallery.
NB: The 1.0.0 release contains a wide range of breaking changes, please refer to the migration guidelines
Please ask questions on StackOverflow using the dash-leaflet
tag, use GitHub issues only for bug reports.
Start by cloning this repository,
git clone git@github.com:thedirtyfew/dash-leaflet.git
cd dash-leaflet
Next, create a virtual environment and install the python dependencies,
python3 -m venv venv && . venv/bin/activate
pip install -r requirements.txt
Finally, install packages via npm (ignore errors) and run the build script,
npm i --ignore-scripts
npm run build
FAQs
Dash Leaflet is a light wrapper around React-Leaflet. The syntax is similar to other Dash components, with naming conventions following the React-Leaflet API.
We found that dash-leaflet demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.