Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Embeddable genomic visualization component based on the Integrative Genomics Viewer
igv.js is an embeddable interactive genome visualization component developed by the Integrative Genomics Viewer (IGV) team.
James T Robinson, Helga Thorvaldsdottir, Douglass Turner, Jill P Mesirov, igv.js: an embeddable JavaScript implementation of the Integrative Genomics Viewer (IGV), Bioinformatics, Volume 39, Issue 1, January 2023, btac830, https://doi.org/10.1093/bioinformatics/btac830
Below are examples and a quickstart guide. See the developer documentation for more documentation.
Mutation Annotation Format (MAF)
igv.js consists of a single javascript file with no external dependencies.
Pre-built files for script include, AMD, or CJS module systems (igv.min.js) and an ES6 module (igv.esm.min.js) can be downloaded from https://cdn.jsdelivr.net/npm/igv@3.0.3/dist/.
To import igv as an ES6 module
import igv from "https://cdn.jsdelivr.net/npm/igv@3.0.3/dist/igv.esm.min.js"
Or as a script include (defines the "igv" global)
<script src="https://cdn.jsdelivr.net/npm/igv@3.0.3/dist/igv.min.js"></script>
Alternatively you can install with npm
npm install igv
and source the appropriate file for your module system (igv.min.js or igv.esm.min.js) in node_modules/igv/dist.
To create an igv.js browser supply a container div
and an initial configuration defining the reference genome, initial tracks, and other state to the
function igv.createBrowser(div, config)
.
This function returns a promise for an igv.Browser object which can used to control the browser. For example, to open a browser on a single alignment track opened at a specific locus:
var igvDiv = document.getElementById("igv-div");
var options =
{
genome: "hg38",
locus: "chr8:127,736,588-127,739,371",
tracks: [
{
"name": "HG00103",
"url": "https://s3.amazonaws.com/1000genomes/data/HG00103/alignment/HG00103.alt_bwamem_GRCh38DH.20150718.GBR.low_coverage.cram",
"indexURL": "https://s3.amazonaws.com/1000genomes/data/HG00103/alignment/HG00103.alt_bwamem_GRCh38DH.20150718.GBR.low_coverage.cram.crai",
"format": "cram"
}
]
};
igv.createBrowser(igvDiv, options)
.then(function (browser) {
console.log("Created IGV browser");
})
For more details see the Wiki for full documentation of the API.
Building igv.js and running the examples require Linux or MacOS. Other Unix environments will probably work but have not been tested.
Windows users can use Windows Subsystem for Linux.
Building igv.js and running the examples requires node.js.
git clone https://github.com/igvteam/igv.js.git
cd igv.js
npm install
npm run build
This creates a dist folder with the following files
To run the tests from the command line
npm run test
To run the examples install http-server.
Start http-server from the project root directory
npx http-server
Then open http://localhost:8080/examples in a web browser.
igv.js require a modern web browser with support for Javascript ECMAScript 2015 (ES6).
igv.js is MIT licensed.
FAQs
Embeddable genomic visualization component based on the Integrative Genomics Viewer
The npm package igv receives a total of 4,662 weekly downloads. As such, igv popularity was classified as popular.
We found that igv demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.