Gathering detailed insights and metrics for ol
Gathering detailed insights and metrics for ol
Installations
npm install olDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Node Version
20.18.2
NPM Version
10.8.2
Score
87
Supply Chain
99.7
Quality
97.5
Maintenance
100
Vulnerability
98.6
License
Releases
137
Contributors
381
Unable to fetch Contributors
Languages
6
JavaScript
CSS
Handlebars
Shell
TypeScript
HTML
JavaScript (99.06%)
CSS (0.47%)
Handlebars (0.26%)
Shell (0.09%)
TypeScript (0.09%)
HTML (0.04%)
Developer
Download Statistics
Total Downloads
43,667,737
Last Day
65,637
Last Week
364,702
Last Month
1,483,956
Last Year
12,688,786
GitHub Statistics
BSD-2-Clause License
11,740 Stars
35,058 Commits
3,079 Forks
386 Watchers
8 Branches
381 Contributors
Updated on Mar 21, 2025
Bundle Size
285.08 kB
Minified
80.61 kB
Minified + Gzipped
Sponsor this package
Maintainers
3
Package Meta Information
Latest Version
10.4.0
Package Id
ol@10.4.0
Unpacked Size
10.58 MB
Size
2.31 MB
File Count
1,086
NPM Version
10.8.2
Node Version
20.18.2
Published on
Jan 29, 2025
Total Downloads
Cumulative downloads
Total Downloads
43,667,737
Last Day
-4.5%
65,637
Compared to previous day
Last Week
1.5%
364,702
Compared to previous week
Last Month
12.5%
1,483,956
Compared to previous month
Last Year
27.5%
12,688,786
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
OpenLayers
OpenLayers is a high-performance, feature-packed library for creating interactive maps on the web. It can display map tiles, vector data and markers loaded from any source on any web page. OpenLayers has been developed to further the use of geographic information of all kinds. It is completely free, Open Source JavaScript, released under the BSD 2-Clause License.
Getting Started
Install the ol package:
npm install ol
Import just what you need for your application:
1import Map from 'ol/Map'; 2import View from 'ol/View'; 3import TileLayer from 'ol/layer/Tile'; 4import XYZ from 'ol/source/XYZ'; 5 6new Map({ 7 target: 'map', 8 layers: [ 9 new TileLayer({ 10 source: new XYZ({ 11 url: 'https://tile.openstreetmap.org/{z}/{x}/{y}.png' 12 }) 13 }) 14 ], 15 view: new View({ 16 center: [0, 0], 17 zoom: 2 18 }) 19});
See the following examples for more detail on bundling OpenLayers with your application:
For more detail on quick prototyping without the use of a Node.js based setup, see the Skypack example.
Sponsors
OpenLayers appreciates contributions of all kinds. We especially want to thank our fiscal sponsors who contribute to ongoing project maintenance.
Pozi helps connect communities through spatial thinking. We love Openlayers and it forms a core part of our platform. https://pozi.com/ https://app.pozi.com/
yey'maps is a scalable cloud GIS suite that is developed with the powerful Openlayers API and the GDAL library. https://www.yeymaps.io/
We develop leading Physical Security Information Management (PSIM) software. OpenLayers is the core of our map engine and we love it! https://ela.pl/
We advance holistic utilization and availability of spatial information, for a better planned, built and managed society. https://www.ubigu.fi/
Build custom maps and identify insights across real estate, engineering, research, business, exploration, construction, manufacturing - and so much more. https://www.scribblemaps.com/
See our GitHub sponsors page or Open Collective if you too are interested in becoming a regular sponsor.
TypeScript support
The ol package includes auto-generated TypeScript declarations as *.d.ts files.
Supported Browsers
OpenLayers runs on all modern browsers (with greater than 1% global usage). This includes Chrome, Firefox, Safari and Edge. For older browsers, polyfills (Fastly or Cloudflare) will likely need to be added.
Documentation
Check out the hosted examples, the workshop or the API documentation.
Bugs
Please use the GitHub issue tracker for all bugs and feature requests. Before creating a new issue, do a quick search to see if the problem has been reported already.
Contributing
Please see our guide on contributing if you're interested in getting involved.
Community
- Need help? Find it on Stack Overflow using the tag 'openlayers'
- Follow @openlayers on Twitter
No vulnerabilities found.
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Info: FSF or OSI recognized license: BSD 2-Clause "Simplified" License: LICENSE.md:0
Reason
no binaries found in the repo
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish.yml:15
Reason
SAST tool is run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Info: all commits (30) are checked with a SAST tool
Reason
2 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-w532-jxjh-hjhj
Reason
dependency not pinned by hash detected -- score normalized to 5
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-preview.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/build-preview.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-preview.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/build-preview.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-preview.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/build-preview.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-preview.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/build-preview.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preview.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy-preview.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preview.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy-preview.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-preview.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy-preview.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preview.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy-preview.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preview.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy-preview.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/security.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/security.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/security.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/openlayers/openlayers/test.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: tasks/publish.sh:78
- Warn: npmCommand not pinned by hash: .github/workflows/deploy-preview.yml:18
- Warn: npmCommand not pinned by hash: .github/workflows/deploy-preview.yml:19
- Info: 0 out of 34 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 11 out of 14 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/security.yml:19
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/security.yml:20
- Info: topLevel 'contents' permission set to 'read': .github/workflows/build-preview.yml:9
- Warn: no topLevel permission defined: .github/workflows/deploy-preview.yml:1
- Warn: no topLevel permission defined: .github/workflows/deploy.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/publish.yml:11
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/security.yml:14
- Info: topLevel 'contents' permission set to 'read': .github/workflows/test.yml:15
- Info: no jobLevel write permissions found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact v10.4.0 not signed: https://api.github.com/repos/openlayers/openlayers/releases/197435849
- Warn: release artifact v10.3.1 not signed: https://api.github.com/repos/openlayers/openlayers/releases/189156469
- Warn: release artifact v10.3.0 not signed: https://api.github.com/repos/openlayers/openlayers/releases/188290325
- Warn: release artifact v10.2.1 not signed: https://api.github.com/repos/openlayers/openlayers/releases/177163739
- Warn: release artifact v10.2.0 not signed: https://api.github.com/repos/openlayers/openlayers/releases/176289953
- Warn: release artifact v10.4.0 does not have provenance: https://api.github.com/repos/openlayers/openlayers/releases/197435849
- Warn: release artifact v10.3.1 does not have provenance: https://api.github.com/repos/openlayers/openlayers/releases/189156469
- Warn: release artifact v10.3.0 does not have provenance: https://api.github.com/repos/openlayers/openlayers/releases/188290325
- Warn: release artifact v10.2.1 does not have provenance: https://api.github.com/repos/openlayers/openlayers/releases/177163739
- Warn: release artifact v10.2.0 does not have provenance: https://api.github.com/repos/openlayers/openlayers/releases/176289953
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
6.3
/10
Last Scanned on 2025-03-17
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More