Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Library | Renders/sec1 | Size | Types | Environment2 | Rendering |
---|---|---|---|---|---|
blo | 💥 8,197 | SVG | |||
ethereum-blockies-base64 | 807 | PNG | |||
blockies-react-svg | 1,749 | SVG | |||
@download/blockies | 334 | Canvas | |||
blockies-ts | 342 | Canvas | |||
react-blockies | 2,361 | Canvas |
npm i -S blo
pnpm add blo
yarn add blo
import { blo } from "blo";
img.src = blo("0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045");
blo is fast enough to not require memoization or async rendering for common use cases.
function AddressIcon({ address }: { address: `0x${string}` }) {
return (
<img
alt={address}
src={blo(address)}
/>
);
}
blo(address: Address, size = 64): string
Get a data URI string representing the identicon as an SVG image.
The size
paramater shouldn’t usually be needed, as the image will stay sharp no matter what the size of the img
element is.
Example:
import { blo } from "blo";
img.src = blo(address); // size inside the SVG defaults to 64px
img2.src = blo(address, 24); // set it to 24px
bloSvg(address: Address, size = 64): string
Same as above except it returns the SVG code instead of a data URI string.
bloImage(address: Address): BloImage
Get a BloImage
data structure that can be used to render the image in different formats.
See src/svg.ts
for an example of how to use it.
The library ships with TypeScript types included.
// BloImage contains the data needed to render an icon.
export type BloImage = [BloImageData, Palette];
// 4x8 grid of the image left side, as 32 PaletteIndex items.
// The right side is omitted as it's a mirror of the left side.
export type BloImageData = Uint8Array;
// Colors used by a given icon.
export type Palette = [
Hsl, // background
Hsl, // color
Hsl, // spot
];
// Points to one of the three Palette colors.
export type PaletteIndex =
| 0 // background
| 1 // color
| 2; // spot
// A color in the HSL color space.
// [0]: 0-360 (hue)
// [1]: 0-100 (saturation)
// [2]: 0-100 (lightness)
export type Hsl = Uint16Array;
// An Ethereum address.
export type Address = `0x${string}`;
Yes.
No it only works with Ethereum addresses, but you can resolve the ENS name to an address (e.g. with wagmi) and pass the result to blo.
You can render to any format you want by using the bloImage()
function, which returns a data structure (see API above). Check out the Bun and Node demos for examples of rendering an identicon in the terminal.
blo only focuses on the Ethereum identicons algorithm but you can use it with any data, just prefix it with 0x
to fulfill the expected Address
type if you are using TypeScript.
blo is short for blockies, which is the name of the original library it is based on.
The number of renders per second. It was measured on Chrome 117 Linux with an AMD Ryzen 7 PRO 4750U. See ./benchmark for the methodology. ↩
The term “all” refers to libraries that are framework agnostic and that run in browsers, Bun and Node.js. ↩
FAQs
blo is a small and fast library to generate Ethereum identicons.
The npm package blo receives a total of 3,975 weekly downloads. As such, blo popularity was classified as popular.
We found that blo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.