Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
topojson - a powerful library to encode geographic data as topology in Python!🌍
Topojson is a library that is capable of creating a topojson encoded format of merely any spatial object in Python.
With topojson it is possible to reduce the size of your spatial data. Mostly by orders of magnitude. It is able to do so through:
See Topojson Documentation Site for all info how to use this package.
The package can be used in multiple different ways, with the main purpose to create a TopoJSON topology.
See the Python Topojson Documentation Site for all info or this Notebook with some examples, such as the following:
Click on the image to go the Notebook Viewer with code-snippets how these images are created or visit the Topojson Documentation Site.
Installation can be done through PyPI by the following command:
python -m pip install topojson
And through conda using the following command:
conda install topojson -c conda-forge
This package topojson
has the following hard dependencies:
numpy
shapely
packaging
Further, optional soft dependencies are:
altair
- enlarge the experience by visualizing your TopoJSON outputsimplification
- more and quicker simplification optionsgeojson
- parse string input with GeoJSON datageopandas
- parse your TopoJSON output directly into a GeoDataFrameipywidgets
+ (lab)extension - make your life complete with the interactive experienceFor now, just use the Github issues. That can be:
Finally, see the Python Topojson Documentation Site for all info how to use this package.
FAQs
topojson - a powerful library to encode geographic data as topology in Python!🌍
We found that topojson demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.