Gathering detailed insights and metrics for @maplibre/ngx-maplibre-gl
Gathering detailed insights and metrics for @maplibre/ngx-maplibre-gl
Installations
npm install @maplibre/ngx-maplibre-glDeveloper Guide
BETA
Typescript
No
Module System
ESM
Node Version
20.19.2
NPM Version
10.8.2
Score
80
Supply Chain
94.8
Quality
88.7
Maintenance
100
Vulnerability
98.9
License
Releases
30
Languages
5
TypeScript
HTML
JavaScript
CSS
SCSS
TypeScript (97.97%)
HTML (0.77%)
JavaScript (0.64%)
CSS (0.38%)
SCSS (0.24%)
Developer
Download Statistics
Total Downloads
346,228
Last Day
85
Last Week
5,182
Last Month
22,493
Last Year
196,003
GitHub Statistics
MIT License
90 Stars
676 Commits
31 Forks
3 Watchers
3 Branches
21 Contributors
Updated on Jul 07, 2025
Maintainers
2
Package Meta Information
Latest Version
20.0.0
Package Id
@maplibre/ngx-maplibre-gl@20.0.0
Unpacked Size
471.34 kB
Size
68.33 kB
File Count
5
NPM Version
10.8.2
Node Version
20.19.2
Published on
Jun 25, 2025
Total Downloads
Cumulative downloads
Total Downloads
346,228
Last Day
-54.8%
85
Compared to previous day
Last Week
-17.4%
5,182
Compared to previous week
Last Month
-1.1%
22,493
Compared to previous month
Last Year
114.8%
196,003
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Peer Dependencies
4
ngx-maplibre-gl
Angular wrapper for maplibre-gl. It exposes a bunch of components meant to be simple to use with Angular.
Demo site
Can be found here (based on the generated gh-pages in this repo): https://maplibre.org/ngx-maplibre-gl/
Attribution
This is a fork of ngx-mapbox-gl and I would like to thank the maintainers there for their amazing work to build this up. It's truly a great piece of software!
API Documentation
The API documentation can be found here.
How to start
npm install @maplibre/ngx-maplibre-gl maplibre-gl
yarn add @maplibre/ngx-maplibre-gl maplibre-gl
There might be a need to add the following configuration to tsconfig.json file
"compilerOptions": {
...
"strictNullChecks": false,
"skipLibCheck": true,
}
Load the CSS of maplibre-gl
For example, with angular-cli add this in angular.json:
1"styles": [ 2 ..., 3 "./node_modules/maplibre-gl/dist/maplibre-gl.css" 4],
Or in the global CSS file (called styles.css for example in angular-cli):
1@import '~maplibre-gl/dist/maplibre-gl.css';
Then, in your app's main module (or in any other module), import the MapComponent:
1import { Component } from '@angular/core'; 2import { MapComponent } from '@maplibre/ngx-maplibre-gl'; 3 4@NgModule({ 5 template: ` 6 <mgl-map 7 [style]="'https://demotiles.maplibre.org/style.json'" 8 [zoom]="[9]" 9 [center]="[-74.5, 40]" 10 > 11 </mgl-map> 12 `, 13 styles: [ 14 ` 15 mgl-map { 16 height: 100%; 17 width: 100%; 18 } 19 `, 20 ], 21 imports: [MapComponent], 22}) 23export class AppComponent {}
No vulnerabilities found.
Reason
8 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENCE:0
- Info: FSF or OSI recognized license: MIT License: LICENCE:0
Reason
1 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-8mmm-9v2q-x3f9
Reason
Found 10/18 approved changesets -- score normalized to 5
Reason
dependency not pinned by hash detected -- score normalized to 4
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-bump-version-pr.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/create-bump-version-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-bump-version-pr.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/create-bump-version-pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-bump-version-pr.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/create-bump-version-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-pages-push.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/gh-pages-push.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/gh-pages-push.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/gh-pages-push.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/npm-publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/npm-publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/npm-publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/npm-publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/npm-publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/npm-publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/npm-publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/maplibre/ngx-maplibre-gl/npm-publish.yml/main?enable=pin
- Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 6 third-party GitHubAction dependencies pinned
- Info: 5 out of 5 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/create-bump-version-pr.yml:1
- Warn: no topLevel permission defined: .github/workflows/gh-pages-push.yml:1
- Warn: no topLevel permission defined: .github/workflows/npm-publish.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 26 are checked with a SAST tool
Score
5.5
/10
Last Scanned on 2025-06-30
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More