Gathering detailed insights and metrics for cesium
Gathering detailed insights and metrics for cesium
An open-source JavaScript library for world-class 3D globes and maps 🌎
Installations
npm install cesiumDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Min. Node Version
>=18.18.0
Node Version
18.19.0
NPM Version
10.2.3
Releases
165
Contributors
365
Languages
8
JavaScript
HTML
GLSL
CSS
TypeScript
Python
Handlebars
Shell
JavaScript (89.85%)
HTML (7.71%)
GLSL (2.14%)
CSS (0.22%)
TypeScript (0.04%)
Python (0.02%)
Handlebars (0.01%)
Developer
Download Statistics
Total Downloads
11,446,716
Last Day
2,156
Last Week
53,922
Last Month
227,476
Last Year
3,358,868
GitHub Statistics
13,133 Stars
41,313 Commits
3,518 Forks
478 Watching
351 Branches
365 Contributors
Maintainers
15
Package Meta Information
Latest Version
1.124.0
Package Id
cesium@1.124.0
Unpacked Size
66.23 MB
Size
19.36 MB
File Count
1,048
NPM Version
10.2.3
Node Version
18.19.0
Publised On
02 Dec 2024
Total Downloads
Cumulative downloads
Total Downloads
11,446,716
Last day
-11.3%
2,156
Compared to previous day
Last week
-4.3%
53,922
Compared to previous week
Last month
-8.9%
227,476
Compared to previous month
Last year
6.7%
3,358,868
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
2
Dev Dependencies
47
@playwright/testchokidarcloccompressionesbuildeslinteslint-config-cesiumeslint-plugin-htmlexpressglobalsglobbyglsl-strip-commentsgulpgulp-clean-cssgulp-insertgulp-renamegulp-replacegulp-tapgulp-ziphuskyistanbul-lib-instrumentjasmine-corejsdockarmakarma-chrome-launcherkarma-coveragekarma-detect-browserskarma-edge-launcherkarma-firefox-launcherkarma-ie-launcherkarma-jasminekarma-longest-reporterkarma-safari-launcherkarma-sourcemap-loaderkarma-spec-reportermarkdownlint-climerge-streammkdirpnode-fetchopenprettierprismjsrequestrimraftsd-jsdoctypescriptyargs
Versions
CesiumJS
CesiumJS is a JavaScript library for creating 3D globes and 2D maps in a web browser without a plugin. It uses WebGL for hardware-accelerated graphics, and is cross-platform, cross-browser, and tuned for dynamic-data visualization.
Built on open formats, CesiumJS is designed for robust interoperability and scaling for massive datasets.
Examples :earth_asia: Docs :earth_americas: Website :earth_africa: Forum :earth_asia: User Stories
:rocket: Get started
Visit the Downloads page to download a pre-built copy of CesiumJS.
npm & yarn
If you’re building your application using a module bundler such as Webpack, Parcel, or Rollup, you can install CesiumJS via the cesium npm package:
1npm install cesium --save
Then, import CesiumJS in your app code. Import individual modules to benefit from tree shaking optimizations through most build tools:
1import { Viewer } from "cesium"; 2import "cesium/Build/Cesium/Widgets/widgets.css"; 3 4const viewer = new Viewer("cesiumContainer");
In addition to the cesium package, CesiumJS is also distributed as scoped npm packages for better dependency management:
@cesium/engine- CesiumJS's core, rendering, and data APIs@cesium/widgets- A widgets library for use with CesiumJS
What next?
See our Quickstart Guide for more information on getting a CesiumJS app up and running.
Instructions for serving local data are in the CesiumJS Offline Guide.
Interested in contributing? See CONTRIBUTING.md. :heart:
:green_book: License
Apache 2.0. CesiumJS is free for both commercial and non-commercial use.
:earth_americas: Where does the Global 3D Content come from?
The Cesium platform follows an open-core business model with open source runtime engines such as CesiumJS and optional commercial subscription to Cesium ion.
CesiumJS can stream 3D content such as terrain, imagery, and 3D Tiles from the commercial Cesium ion platform alongside open standards from other offline or online services. We provide Cesium ion as the quickest option for all users to get up and running, but you are free to use any combination of content sources with CesiumJS that you please.
Bring your own data for tiling, hosting, and streaming from Cesium ion. Using Cesium ion helps support CesiumJS development.
:white_check_mark: Features
- Stream in 3D Tiles and other standard formats from Cesium ion or another source
- Visualize and analyze on a high-precision WGS84 globe
- Share with users on desktop or mobile
See more in the CesiumJS Features Checklist.
Stable Version
Stable Version
1.124.0
MODERATE
1
MODERATE
6.1/10
Summary
Cross-site Scripting in cesium
Affected Versions
<= 1.111.0
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.md:0
Reason
0 existing vulnerabilities detected
Reason
binaries present in source code
Details
- Warn: binary detected: Specs/TestWorkers/TestWasm/testWasm.wasm:1
- Warn: binary detected: packages/engine/Source/ThirdParty/basis_transcoder.wasm:1
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'main'
- Warn: 'force pushes' enabled on branch 'main'
- Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'
- Warn: 'stale review dismissal' is disabled on branch 'main'
- Warn: required approving review count is 1 on branch 'main'
- Warn: codeowners review is not required on branch 'main'
- Warn: 'last push approval' is disabled on branch 'main'
- Warn: no status checks found to merge onto branch 'main'
- Info: PRs are required in order to make changes on branch 'main'
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/deploy.yml:14
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/deploy.yml:15
- Warn: no topLevel permission defined: .github/workflows/cla.yml:1
- Warn: no topLevel permission defined: .github/workflows/deploy.yml:1
- Warn: no topLevel permission defined: .github/workflows/dev.yml:1
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Warn: no topLevel permission defined: .github/workflows/prod.yml:1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact 1.124 not signed: https://api.github.com/repos/CesiumGS/cesium/releases/188570709
- Warn: release artifact 1.123 not signed: https://api.github.com/repos/CesiumGS/cesium/releases/183165484
- Warn: release artifact 1.122 not signed: https://api.github.com/repos/CesiumGS/cesium/releases/177836080
- Warn: release artifact 1.121 not signed: https://api.github.com/repos/CesiumGS/cesium/releases/173264535
- Warn: release artifact 1.120 not signed: https://api.github.com/repos/CesiumGS/cesium/releases/168306705
- Warn: release artifact 1.124 does not have provenance: https://api.github.com/repos/CesiumGS/cesium/releases/188570709
- Warn: release artifact 1.123 does not have provenance: https://api.github.com/repos/CesiumGS/cesium/releases/183165484
- Warn: release artifact 1.122 does not have provenance: https://api.github.com/repos/CesiumGS/cesium/releases/177836080
- Warn: release artifact 1.121 does not have provenance: https://api.github.com/repos/CesiumGS/cesium/releases/173264535
- Warn: release artifact 1.120 does not have provenance: https://api.github.com/repos/CesiumGS/cesium/releases/168306705
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cla.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/cla.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cla.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/cla.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/dev.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prod.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/prod.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prod.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/prod.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prod.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/prod.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prod.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/CesiumGS/cesium/prod.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/actions/verify-package/script.sh:18
- Warn: npmCommand not pinned by hash: .github/workflows/cla.yml:21
- Warn: npmCommand not pinned by hash: .github/workflows/deploy.yml:33
- Warn: npmCommand not pinned by hash: .github/workflows/dev.yml:21
- Warn: npmCommand not pinned by hash: .github/workflows/dev.yml:42
- Warn: npmCommand not pinned by hash: .github/workflows/dev.yml:59
- Warn: npmCommand not pinned by hash: .github/workflows/dev.yml:75
- Warn: npmCommand not pinned by hash: .github/workflows/prod.yml:17
- Warn: npmCommand not pinned by hash: .github/workflows/prod.yml:42
- Info: 0 out of 16 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 0 out of 9 npmCommand dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
4.8
/10
Last Scanned on 2024-12-23
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More