
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
@urbit/sigil-js
Advanced tools
[](https://www.npmjs.com/package/@tlon/sigil-js)
Each of the ~4.2 billion points on Azimuth is unique. Each one has a pronounceable, easily memorized name, something like ~ravmel-ropdyl. Sigils visualize these names – there are as many unique Sigils as there are Azimuth points. @tlon/sigil-js is a javascript library that converts one of these names into its corresponding Sigil.

import { sigil, reactRenderer } from '@tlon/sigil-js'
const Sigil = props => {
return (
<>
{
sigil({
patp: props.patp,
renderer: reactRenderer,
size: props.size,
colors: ['black', 'white'],
})
}
</>
)
}
npm install @tlon/sigil-js
| Param | Explanation | Type | Optional? |
|---|---|---|---|
patp | Any valid urbit @p | string | No, and can only accept galaxies, stars and planets. |
renderer | A recursive function that controls the DOM output. See stringRenderer() and reactRenderer() for examples. Both are exported via sigil-js. | function | Yes. If left undefined, sigil() will return an SVG AST |
size | Width and height of desired SVG output | integer | No |
width | Width of desired SVG output | integer | No |
height | Height of desired SVG output | integer | No |
colors | A background (first value) and foreground color (second value) with which to paint the sigil | array like [#4330FC, #FFFFFF] | Yes, default is ['#000', '#fff'] |
margin | Should the layout use margin or not? | boolean | Yes |
class | CSS class to add to the outer SVG tag | string | Yes |
attributes | Adds DOM tag attributes to the outer SVG element, like width and height | object | Yes |
renderer paramAs mentioned about, the renderer param expects a recursive function that transform the SVG AST that is generated by sigils.js into DOM elements. Two renders are exported by Sigil.js.
| Commands | Description |
|---|---|
gulp or npm run build | Build the library from source |
npm run test
The toolkit is comprised of helper node scripts, test scripts and a preview webapp. It will remain undocumented for the time being.
There are two main dependencies.
And React for the reactRenderer function.
Please read CONTRIBUTING.md for details on the process for submitting pull requests to us.
This project is licensed under the MIT License - see the LICENSE.txt file for details

FAQs
[](https://www.npmjs.com/package/@tlon/sigil-js)
We found that @urbit/sigil-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.