
Security News
Risky Biz Podcast: AI Agents Are Raising the Stakes for Software Supply Chain Security
Open source attacks are accelerating as AI coding agents pull in dependencies faster, with less human review.
@rvagg/ponder
Advanced tools
Filecoin-compatible fork of ponder. An open-source TypeScript framework for EVM data indexing.
A Filecoin-compatible fork of ponder. Versions track upstream; the only delta is a small set of patches to make Ponder usable against Filecoin's EVM (FVM).
This is a fork. If you're indexing on Ethereum, Base, Arbitrum, or any other standard EVM chain, this fork will work but upstream
ponderwould be the better choice. This fork exists only to unblock Filecoin (chains 314 and 314159).
Three patches on top of upstream main:
Filecoin chain IDs (314 mainnet, 314159 calibnet) are configured with 900-block finality.
For the full diff and rationale, see the fork repository. The original upstream PR was ponder-sh/ponder#2282.
Use the npm npm: alias so source code keeps importing from "ponder". This matters because the package's internal type declarations (virtual modules, type imports) self-reference the original "ponder" name; installing under that local name keeps everything resolving:
{
"dependencies": {
"ponder": "npm:@rvagg/ponder@^0.16.6"
}
}
npm install
# or pnpm install / bun install
You can install under the scope name directly (npm install @rvagg/ponder), but then you'll need a tsconfig paths entry mapping "ponder" to the renamed package, plus your own source-level imports to use either name. The alias above is simpler.
The @ponder/utils runtime dep resolves to upstream's published version. No other forks needed.
The API is identical to upstream Ponder. Refer to ponder.sh for documentation, the config reference, schema definition, indexing functions, and everything else.
A minimal Filecoin config:
// ponder.config.ts
import { createConfig } from "ponder"
import { MyContractAbi } from "./abis/MyContract"
export default createConfig({
chains: {
mainnet: {
id: 314,
rpc: process.env.FILECOIN_RPC_URL!,
pollingInterval: 30_000,
},
},
contracts: {
MyContract: {
abi: MyContractAbi,
chain: "mainnet",
address: "0x...",
startBlock: 5_000_000,
},
},
})
eth_getLogs call. Performance impact only.debug_traceBlockByHash (Geth format). Lotus only supports trace_block (OpenEthereum format). Trace handlers and transfer handlers don't work on Filecoin.Versions mirror upstream ponder: @rvagg/ponder@0.16.6 corresponds to upstream's ponder@0.16.6 plus the Filecoin patches. New releases are cut after rebasing the fork onto each upstream release.
github.com/rvagg/filecoin-ponder
MIT (same as upstream Ponder).
FAQs
Filecoin-compatible fork of ponder. An open-source TypeScript framework for EVM data indexing.
The npm package @rvagg/ponder receives a total of 8 weekly downloads. As such, @rvagg/ponder popularity was classified as not popular.
We found that @rvagg/ponder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Open source attacks are accelerating as AI coding agents pull in dependencies faster, with less human review.

Research
/Security News
Malicious Chrome and Firefox extensions posed as free VPNs while stealing clipboard data through later extension updates.

Research
/Security News
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.