
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
@urbit/hoon-language-server
Advanced tools
Earth-side component of a language server for Hoon. Enables two-way communication between supported text editors and the language-server agent on an urbit ship.
npm install -g @urbit/hoon-language-server
nix-build -E 'with import <nixpkgs> {}; callPackage ./default.nix {}'
nix-env -i ./result
NOTE: Usually your editor will handle this, you just need to set the correct parameters in your editor configuration.
hoon-language-server -p 80 -d 0 -u http://localhost -s zod -c lidlut-tabwed-pillex-ridrup
-p: HTTP port of your (running) ship-d: didSave event delay-u: ship url-s: @p of ship (without a sig)-c: +code of ship (without a sig)You must have an urbit ship running (can be a livenet ship) with the language-server agent started. To create and start a fake ~zod:
urbit -F zod -c zod
In the urbit dojo, start the language server:
dojo> |start %language-server
get the +code
dojo> +code
To start the same ship again in the future just run:
urbit zod
in the same directory it was created in.
Your code editor now needs to use hoon-language-server as an LSP provider. Supported plugins:
hoon.vim does not use the language server itself, but the github page describes a setup using vim-lsp.
Neovim users should use hoon.vim with one of the following LSP setups:
Install nvim-lspconfig. To use the default configuration, add the following to init.lua:
require'lspconfig'.hoon_ls.setup{}
To modify the default options use:
require'lspconfig'.hoon_ls.setup{
cmd = {"hoon-language-server", "-p", "8080"}
}
You can include lua snippets in your init.vim like so:
lua << EOF
require'lspconfig'.hoon_ls.setup{}
EOF
Install and configure coc.nvim, then add a languageserver entry to ~/.config/nvim/coc-settings.json:
{
"languageserver": {
"hoon-language-server": {
"command": "hoon-language-server",
"args": ["-p", "8080"],
"filetypes": ["hoon"]
}
}
}
FAQs
LSP bridge for Hoon.
The npm package @urbit/hoon-language-server receives a total of 17 weekly downloads. As such, @urbit/hoon-language-server popularity was classified as not popular.
We found that @urbit/hoon-language-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.