
Security News
pnpm 10.16 Adds New Setting for Delayed Dependency Updates
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
@aztec/archiver
Advanced tools
Archiver is a service which is used to fetch data on-chain data and present them in a nice-to-consume form.
Archiver is a service which is used to fetch data on-chain data and present them in a nice-to-consume form.
The on-chain data specifically are the following events:
L2BlockProposed
event emitted on Rollup contract,MessageAdded
event emitted on Inbox contract,The interfaces defining how the data can be consumed from the archiver are L2BlockSource
, L2LogsSource
and ContractDataSource
.
The archiver sync process periodically checks its current state against the Rollup contract on L1 and updates its local state.
After the implementation of delayed attestation verification, the Rollup contract on L1 no longer validates committee attestations. Instead, these are posted in calldata, and L2 nodes are expected to verify them as they download blocks. The archiver handles this validation during its sync process.
Whenever the archiver detects a block with invalid attestations, it skips it. These blocks are not meant to be part of the chain, so the archiver ignores them and continues processing the next blocks. It is expected that an honest proposer will eventually invalidate these blocks, removing them from the chain on L1, and then resume the sequence of valid blocks.
[!WARNING]
If the committee for the epoch is also malicious and attests to a descendant of an invalid block, nodes should also ignore these descendants, unless they become proven. This is currently not implemented. Nodes assume that the majority of the committee is honest.
When the current node is elected as proposer, the sequencer
needs to know whether there is an invalid block in L1 that needs to be purged before posting their own block. To support this, the archiver exposes a pendingChainValidationStatus
, which is the state of the tip of the pending chain. This status can be valid in the happy path, or invalid if the tip of the pending chain has invalid attestations. If invalid, this status also contains all the data needed for purging the block from L1 via an invalidate
call to the Rollup contract. Note that, if the head of the chain has more than one invalid consecutive block, this status will reference the earliest one that needs to be purged, since a call to purge an invalid block will automatically purge all descendants. Refer to the InvalidateLib.sol for more info.
[!TIP]
The archiver can be configured toskipValidateBlockAttestations
, which will make it skip this validation. This cannot be set via environment variables, only via a call tonodeAdmin_setConfig
. This setting is only meant for testing purposes.
As an example, let's say the chain has been progressing normally up until block 10, and then:
pendingChainValidationStatus
will point to block 11.pendingChainValidationStatus
will point to the new block 11 that needs to be purged.pendingChainValidationStatus
will point to 11. This is because the archiver does not follow BlockInvalidated
events.FAQs
Archiver is a service which is used to fetch data on-chain data and present them in a nice-to-consume form. The on-chain data specifically are the following events:
The npm package @aztec/archiver receives a total of 2,298 weekly downloads. As such, @aztec/archiver popularity was classified as popular.
We found that @aztec/archiver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.