Gathering detailed insights and metrics for turf
Gathering detailed insights and metrics for turf
Installations
npm install turfDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
4.4.7
NPM Version
2.15.8
Score
89.2
Supply Chain
78.5
Quality
74
Maintenance
100
Vulnerability
98.9
License
Releases
14
Languages
3
TypeScript
JavaScript
Shell
TypeScript (86.94%)
JavaScript (13.05%)
Shell (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
9,840 Stars
3,791 Commits
980 Forks
179 Watchers
48 Branches
177 Contributors
Updated on Jul 12, 2025
Maintainers
9
Package Meta Information
Latest Version
3.0.14
Package Id
turf@3.0.14
Size
280.56 kB
NPM Version
2.15.8
Node Version
4.4.7
Published on
Jul 05, 2016
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
46
turf-collectturf-alongturf-areaturf-bbox-polygonturf-bearingturf-bezierturf-bufferturf-centerturf-centroidturf-circleturf-combineturf-concaveturf-convexturf-destinationturf-distanceturf-envelopeturf-differenceturf-explodeturf-bboxturf-flipturf-tesselateturf-hex-gridturf-insideturf-intersectturf-isolinesturf-kinksturf-line-distanceturf-line-sliceturf-metaturf-midpointturf-nearestturf-planepointturf-point-gridturf-point-on-lineturf-point-on-surfaceturf-randomturf-sampleturf-simplifyturf-squareturf-square-gridturf-tagturf-tinturf-triangle-gridturf-unionturf-withinturf-helpers
A modular geospatial engine written in JavaScript
Turf is a JavaScript library for spatial analysis. It includes traditional spatial operations, helper functions for creating GeoJSON data, and data classification and statistics tools. Turf can be added to your website as a client-side plugin, or you can run Turf server-side with Node.js (see below).
##Installation
In Node.js:
1npm install turf
In browser:
Download the minified file, and include it in a script tag. This will expose a global variable named "turf".
1<script src="turf.min.js" charset="utf-8"></script>
Browserify:
All of Turf's functions can also be installed as separate modules. This works well with tools like browserify where you want to install only the code you need. It also allows you to mix and match modules. This is the recommended usage pattern for most production environments. For example, to install the point and buffer modules use:
1npm install turf-point turf-buffer
###Data in Turf
Turf uses GeoJSON for all geographic data. Turf expects the data to be standard WGS84 longitude, latitude coordinates. Check out geojson.io for a tool to easily create this data.
Most Turf functions work with GeoJSON features. These are are pieces of data that represent a collection of properties (ie: population, elevation, zipcode, etc.) along with a geometry. GeoJSON has several geometry types such as:
- Point
- LineString
- Polygon
Turf provides a few geometry functions of its own. These are nothing more than simple (and optional) wrappers that output plain old GeoJSON. For example, these two methods of creating a point are functionally equivalent:
var point1 = turf.point([0, 0]);
var point2 = {
type: 'Feature',
geometry: {
type: 'Point',
coordinates: [0, 0]
},
properties: {}
};
##Functions
####geometry
####joins
####data
remove
####measurement
distance
####interpolation
####grids
####classification
quantile
####aggregation
average
####transformation
buffer
####misc
flip
No vulnerabilities found.
Reason
5 commit(s) out of 30 and 14 issue activity out of 30 found in the last 90 days -- score normalized to 10
Reason
all last 30 commits are reviewed through GitHub
Reason
no vulnerabilities detected
Reason
license file detected
Details
- Info: : LICENSE:1
Reason
no dangerous workflow patterns detected
Reason
update tool detected
Details
- Info: Dependabot detected
Reason
no binaries found in the repo
Reason
dependency not pinned by hash detected -- score normalized to 9
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/turf.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/Turfjs/turf/turf.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/turf.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/Turfjs/turf/turf.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/turf.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/Turfjs/turf/turf.yml/master?enable=pin
- Info: Third-party GitHubActions are pinned
- Info: Dockerfile dependencies are pinned
- Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
- Info: no insecure (not pinned by hash) dependency downloads found in shell scripts
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'master'
- Info: 'allow deletion' disabled on branch 'master'
- Info: status check found to merge onto on branch 'master'
- Warn: number of required reviewers is only 1 on branch 'master'
Reason
no badge detected
Reason
non read-only tokens detected in GitHub workflows
Details
- Warn: no topLevel permission defined: .github/workflows/turf.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/Turfjs/turf/turf.yml/master?enable=permissions
Reason
security policy file not detected
Reason
project is not fuzzed
Score
7.3
/10
Last Scanned on 2022-08-15
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More