
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@buildonspark/spark-frost-bare-addon
Advanced tools
This package provides Spark frost signer bindings for use in Bare runtime. This adds support for more platforms since the WASM bindings (used for Node.js and browsers) in spark-sdk are not supported in bare in e.g. < iOS 18.4.
yarn build
# Test the addon
yarn bare index.js
If running from the Spark JS workspaces running bare with yarn bare and yarn bare-make is recommended to use the common version installed. Alternatively you can install globally with npm:
npm i -g bare bare-make
From the Spark JS workspaces you can test running spark-sdk in bare from our spark-bare-app example scripts or install it in your project and import from the @buildonspark/bare package:
import { SparkWallet, BareSparkSigner } from "@buildonspark/bare" with {
imports: "./imports.json",
};
let { wallet, mnemonic } = await SparkWallet.initialize({
signer: new BareSparkSigner(),
});
const balance = await wallet.getBalance();
When publishing the spark-frost-bare-addon to NPM you should include all prebuilds for tier 1 platforms listed in the bare docs. These docs link to an example prebuild workflow on which our prebuild workflow is based, but ours also includes steps required to set up Rust to build the bindings. This workflow will run automatically on any changes to spark-frost-bare-addon files or its dependencies. Before publishing to NPM locally you should navigate to the "Bare prebuild" workflow run when the commit lands in main, click "Summary", and download the "prebuilds" articact which contains files for all platforms. Replace your local "prebuilds" directory with this one to ensure they're all included when you publish to NPM.
On MacOS be sure to prioritize the system toolchain instead of homebrew, otherwise you'll encounter errors for bare-make commands:
export PATH="/usr/bin:$PATH"
As mentioned in the bare addon guide run the following:
yarn
cd spark-frost-bare-addon
# By default bare-make will target and build for your current platform
yarn bare-make generate && yarn bare-make build && yarn bare-make install
# Test the addon
yarn bare index.js
# To build for spark-bare-expo-react-native-app
yarn bare-make generate --platform ios --arch arm64 --simulator && yarn bare-make build && yarn bare-make install
# This seems to be necessary to build/install an additional target, otherwise it reuses the previous target:
rm -rf build
yarn bare-make generate --platform ios --arch arm64 && yarn bare-make build && yarn bare-make install
rm -rf build
yarn bare-make generate --platform ios --arch x64 && yarn bare-make build && yarn bare-make install
rm -rf build
FAQs
Example Bare addon
We found that @buildonspark/spark-frost-bare-addon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.