Gathering detailed insights and metrics for vue2-leaflet
Gathering detailed insights and metrics for vue2-leaflet
Installations
npm install vue2-leafletDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
14.16.1
NPM Version
6.14.12
Score
70.9
Supply Chain
98.8
Quality
78.1
Maintenance
50
Vulnerability
99.6
License
Releases
9
v2.4.3 - Marker visible prop fix
v2.4.3
Published on 09 Feb 2020
v2.2.1
v2.2.1
Published on 24 Jul 2019
Ready event on components
v2.1.1
Published on 25 Apr 2019
Ready event on components
v2.1.0
Published on 21 Apr 2019
ES Module, Bug fixes, Unit test boostrap
v2.0.3
Published on 20 Apr 2019
Licon component, sync modifier on marker lat-lng
v1.2.0
Published on 08 Nov 2018
Contributors
74
Unable to fetch Contributors
Languages
2
JavaScript
Vue
JavaScript (55.4%)
Vue (44.6%)
Developer
Download Statistics
Total Downloads
11,095,961
Last Day
1,765
Last Week
23,708
Last Month
140,821
Last Year
1,903,240
GitHub Statistics
1,959 Stars
1,102 Commits
379 Forks
39 Watching
11 Branches
74 Contributors
Bundle Size
132.50 kB
Minified
10.53 kB
Minified + Gzipped
Maintainers
2
Package Meta Information
Latest Version
2.7.1
Package Id
vue2-leaflet@2.7.1
Size
63.00 kB
NPM Version
6.14.12
Node Version
14.16.1
Publised On
27 Jun 2021
Total Downloads
Cumulative downloads
Total Downloads
11,095,961
Last day
-72.9%
1,765
Compared to previous day
Last week
-31.6%
23,708
Compared to previous week
Last month
-4.6%
140,821
Compared to previous month
Last year
-23%
1,903,240
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Peer Dependencies
3
Dev Dependencies
45
@babel/core@babel/plugin-transform-runtime@babel/preset-env@babel/runtime@vue/test-utils@vuepress/plugin-register-componentsbabel-eslintbabel-jestconcurrentlycoverallseslinteslint-config-prettiereslint-config-standardeslint-plugin-importeslint-plugin-nodeeslint-plugin-promiseeslint-plugin-standardeslint-plugin-vuehuskyjestjest-mock-consolejest-serializer-vuejest-transform-stubleafletlint-stagedmarkdown-it-includeprettierproj4leafletrolluprollup-copy-pluginrollup-plugin-babelrollup-plugin-bublerollup-plugin-commonjsrollup-plugin-node-resolverollup-plugin-replacerollup-plugin-vuetypescriptvuevue-docgen-clivue-jestvue-template-compilervuepressvuepress-plugin-containervuepress-plugin-demo-codevuepress-plugin-live
Versions
Vue2Leaflet
Vue2Leaflet is a JavaScript library for the Vue framework that wraps Leaflet making it easy to create reactive maps.
How to install
1npm install vue2-leaflet leaflet --save
For more detailed information you can follow the Quick Start Guide
Breaking change from 1.x.x to 2.x.x
A new major release 2.0.0 is available and come with two breaking changes:
Leaflet is not automatically installed anymore
Leaflet is now a peerDependency and need to be installed manually, we updated our docs to reflect this but please pay attention when migrating
Importing the library in Webpack / Rollup
Now the code of vue2-leaflet is split component by component (while using a bundler like Webpack/Rollup/Parcel) to do so the following syntax is not working anymore:
1import Vue2Leaflet from 'vue2-leaflet'; // INVALID
And has been replaced by
1import * as Vue2Leaflet from 'vue2-leaflet'; // VALID
Is highly suggested to import only the needed modules by doing so:
1import { LMap, LTileLayer, LMarker } from 'vue2-leaflet';
This will reduce the size of the bundle significantly
Documentation
Go here to check out live examples and docs.
Support & Community
Do you have questions? Ideas? do you want to collaborate but you feel lost? Join us on discord Invite Link
Leaflet Plugins
Vue2Leaflet has a wide array of plugins written by the community! Check Here
Contribute
1# clone the repository 2git clone https://github.com/vue-leaflet/Vue2Leaflet.git 3cd Vue2Leaflet 4# install dependencies and build vue2-leaflet 5npm install 6# Compile the source and start the documentation server 7npm run dev
Go to http://localhost:8080/ to see the docs and the examples
Any changes to the source code is reflected in the docs after a handfuls of seconds.
Authors
- Mickaël Bouchaud
- Nicolò Maria Mezzopera
Inspired by many map wrapper (google and leaflet) for many framework (React, Angular and Vue 1.0)
Contributors
If you believe you should be on this list please add yourself by typing this on a PR or issue:
@all-contributors please add @yourNickname for Xwhere X is one of all-contributors emojoi keys
And all the rest who contributed
License
This project is licensed under the MIT License - see the LICENSE file for details
No vulnerabilities found.
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/nodejs.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/vue-leaflet/Vue2Leaflet/nodejs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/vue-leaflet/Vue2Leaflet/nodejs.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/nodejs.yml:27
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
75 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-6chw-6frg-f759
- Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-257v-vj4p-3w2h
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-3wcq-x3mq-6r9p
- Warn: Project is vulnerable to: GHSA-r9p9-mrjm-926w
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-7r28-3m3f-r2pr
- Warn: Project is vulnerable to: GHSA-r8j5-h5cx-65gg
- Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-6c8f-qphg-qjgp
- Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
- Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
- Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5
- Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp
- Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq
- Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr
- Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765
- Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g
- Warn: Project is vulnerable to: GHSA-5fw9-fq32-wv5p
- Warn: Project is vulnerable to: GHSA-px4h-xg32-q955
- Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-hwj9-h5mp-3pm3
- Warn: Project is vulnerable to: GHSA-h4hr-7fg3-h35w
- Warn: Project is vulnerable to: GHSA-gj77-59wh-66hg
- Warn: Project is vulnerable to: GHSA-hqhp-5p83-hx96
- Warn: Project is vulnerable to: GHSA-3949-f494-cm99
- Warn: Project is vulnerable to: GHSA-p493-635q-r6gr
- Warn: Project is vulnerable to: GHSA-3965-hpx2-q597
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-9m6j-fcg5-2442
- Warn: Project is vulnerable to: GHSA-hh27-ffr2-f2jc
- Warn: Project is vulnerable to: GHSA-rqff-837h-mm52
- Warn: Project is vulnerable to: GHSA-8v38-pw62-9cw2
- Warn: Project is vulnerable to: GHSA-hgjh-723h-mx2j
- Warn: Project is vulnerable to: GHSA-jf5r-8hm2-f872
- Warn: Project is vulnerable to: GHSA-5j4c-8p2g-v4jx
- Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-6fc8-4gx4-v693
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
3.8
/10
Last Scanned on 2024-12-16
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More