// npm package
@antv/l7-source
weekly
49,915
monthly
187,743
versions
565
maintainers
51
license
MIT
first publish
2019-11-20
publisher
lzxue
tarball
271,436 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-05-11
// publisher campaignby lzxue
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @2.25.10· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
- @2.25.10··AUTO-PUBLISHED·publisher: lzxueheuristic 75/100static flags 0llm benign (0.85) via ollamapopularity:very-highmature-packageosv-flagged:MAL-2026-4051
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/l7-source", "version": "2.25.10", "description": "", "license": "MIT", "author": "https://github.com/orgs/antvis/people", "sideEffects": true, "main": "lib/index.js", "module": "es/index.js", "types": "es/index.d.ts", "files": [ "lib", "es" ], "dependencies": { "@antv/async-hook": "^2.2.9", "@babel/runtime": "^7.7.7", "@mapbox/geojson-rewind": "^0.5.2", "@mapbox/vector-tile": "^1.3.1", "@turf/helpers": "^6.1.4", "@turf/invariant": "^6.1.2", "@turf/meta": "^6.0.2", "eventemitter3": "^4.0.0", "geojson-vt": "^3.2.1", "pbf": "^3.2.1", "supercluster": "^7.0.0", "@antv/l7-core": "2.25.10", "@antv/l7-utils": "2.25.10" }, "devDependencies": { "@types/geojson": "^7946.0.14", "@types/geojson-vt": "3.2.0", "@types/mapbox__vector-tile": "^1.3.0", "@types/pbf": "^3.0.2" }, "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org" }, "repository": "git@github.com:antvis/L7.git", "scripts": { "dev": "father dev", "build": "npm run clean && father build", "check-deps": "father doctor", "lint": "eslint src __tests__", "c --- index.js (entry) --- var __create = Object.create; var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getProtoOf = Object.getPrototypeOf; var __hasOwnProp = Object.prototype.hasOwnProperty; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default")); var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps( // If the importer is in node compatibility mode or this is not an ESM // file that has been converted to a CommonJS file using a Babel- // compatible transform (i.e. "_ --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- lib/base-source.js (bundled) --- var __defProp = Object.defineProperty; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropNames = Object.getOwnPropertyNames; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod); var __async = (__this, __arguments, generator) => { return new Promise((resolve, reject) => { var fulfilled = (value) => { try { step(generator.next(value)); } catch (e) { reject(e); } }; var rejected = (value) => { try { step(generator.throw(value)); } catch (e) { reject(e); } }; var step = (x) => x.done ? resolve(x.value) : Promise.resolve(x.value).then(fulfilled, rejected); step((generator = generator.apply(__this, __arguments)).next()); }); }; // src/base-source.ts var base_source_exports = {}; __export(base_sourc --- lib/utils/relative-coordinates.js (bundled) --- var __defProp = Object.defineProperty; var __defProps = Object.defineProperties; var __getOwnPropDesc = Object.getOwnPropertyDescriptor; var __getOwnPropDescs = Object.getOwnPropertyDescriptors; var __getOwnPropNames = Object.getOwnPropertyNames; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b)); var __export = (target, all) => { for (var name in all) __defProp(target, name, { get: all[name], enumerable: true }); }; var __copyProps = (to, from, except, desc) => { if (from && typeof from === "object" || typeof from === "function") { for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable }); } return to; }; var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod); // src/utils/relative-coordinates.ts var relative_coordinates_exports = {}; __export(relative_coordinates_exports, { calculateRelativeOrigin: () => calculateRelativeOrigin, convertToAbsoluteCoordinates: () => convertToAbsoluteCoordinates, convertToRelativeCoordinates: () => convertToRelativeCoordinates, processRelativeCoordinates: () => processRelativeCoordinates }); module.exports = __toCommonJS(relative_coordinates_exports); function calc --- es/base-source.js (bundled) --- var __defProp = Object.defineProperty; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; var __async = (__this, __arguments, generator) => { return new Promise((resolve, reject) => { var fulfilled = (value) => { try { step(generator.next(value)); } catch (e) { reject(e); } }; var rejected = (value) => { try { step(generator.throw(value)); } catch (e) { reject(e); } }; var step = (x) => x.done ? resolve(x.value) : Promise.resolve(x.value).then(fulfilled, rejected); step((generator = generator.apply(__this, __arguments)).next()); }); }; // src/base-source.ts import { SyncHook } from "@antv/async-hook"; import { TilesetManager, bBoxToBounds, extent, lodashUtil, padBounds } from "@antv/l7-utils"; import { EventEmitter } from "eventemitter3"; import { getParser, getTransform } from "./factory"; import { cluster } from "./transform/cluster"; import { statMap } from "./utils/statistics"; import { getColumn } from "./utils/util"; var { cloneDeep, isFunction, isString, mergeWith } = lodashUtil; function mergeCustomizer(objValue, srcValue) { if (Array.isArray(srcValue)) { return srcValue; } } var Source = class extends EventEmitter { constructor(data, cfg) { super(); this.type = "source"; this.isTile = false; this.inited = false; // 生命周期钩子 this.hooks = { i --- es/utils/relative-coordinates.js (bundled) --- var __defProp = Object.defineProperty; var __defProps = Object.defineProperties; var __getOwnPropDescs = Object.getOwnPropertyDescriptors; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOwnProperty; var __propIsEnum = Object.prototype.propertyIsEnumerable; var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value; var __spreadValues = (a, b) => { for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]); if (__getOwnPropSymbols) for (var prop of __getOwnPropSymbols(b)) { if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]); } return a; }; var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b)); // src/utils/relative-coordinates.ts function calculateRelativeOrigin(dataArray) { let minLng = Infinity; let maxLng = -Infinity; let minLat = Infinity; let maxLat = -Infinity; dataArray.forEach((item) => { const coordinates = item.coordinates; if (!coordinates) return; const processCoordinates = (coords) => { if (typeof coords[0] === "number" && typeof coords[1] === "number") { const [lng, lat] = coords; minLng = Math.min(minLng, lng); maxLng = Math.max(maxLng, lng); minLat = Math.min(minLat, lat); maxLat = Math.max(maxLat, lat); } else if (Array.isArray(coords[0])) { coords.forEach(processCoordinates); } }; processCoordinates(coordinates); }); const centerLng = (minLng + maxLng) / 2; const centerLat = (minLat + maxLat) / 2; return [centerLng, centerLat]; } function convertToRelativeCoordinates(dataArray, relativeOrigin) { const [originLng, orig
