
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
A simple gem for getting an image of a desired location using OSM tiles. This is fairly beta software and will likely change soon to make it nicer to use.
Note: You need to have rmagick installed for this gem to work. I will work on making this easier but for now just follow the instructions on the readme https://github.com/rmagick/rmagick
Downloading large amounts of data from the openstreetmap.org tileserver is strictly forbidden. This gem is NOT to be used for downloading large maps from OSM for offline use. If you need local copies of large amounts of OSM tiles you must set up your own tile server or find a new tileserver where this is permitted. More info can be found at: https://operations.osmfoundation.org/policies/tiles/
Create an instance of OSMTileGrabber
OSMTileGrabber.new(lat1, lon1, lat2, lon2, zoom)
lat1 and lon1 are the coordinates of the top left corner of the map you wish to download. lat2 and lon2 is the bottom right coordinate. Zoom is the zoom level you wish to download the map at (1-19) a higher zoom will create a bigger image with more detail.
to download the image run create_image("<output_path>")
on the object instance. This will save the
final image at the path provided.
require 'osm_tile_grabber'
osm = OSMTileGrabber.new(-34.9220585,138.5879188,-34.9397,138.6239,15)
osm.create_image("/tmp/output.png")
FAQs
Unknown package
We found that osm_tile_grabber demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.