
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@chainlink/cre-sdk-javy-plugin
Advanced tools
WebAssembly compilation tools for Chainlink CRE SDK workflows using Javy.
This package enables compiling TypeScript/JavaScript workflows to WebAssembly for execution in the Chainlink Runtime Environment. It provides the Javy plugin that exposes CRE host functions to guest workflows.
bun add @chainlink/cre-sdk-javy-plugin
# One-time setup: download Javy binary and compile plugin
bunx cre-setup
# Compile your workflow to WebAssembly
bunx cre-compile-workflow src/workflow.js dist/workflow.wasm
If using outside the CRE SDK monorepo:
Install the package
bun add @chainlink/cre-sdk-javy-plugin
Setup (one-time)
bunx cre-setup
This downloads the appropriate Javy binary for your OS and compiles the CRE plugin.
Compile workflows
bunx cre-compile-workflow <input.js> <output.wasm>
# Compile a workflow
bunx cre-compile-workflow src/hello-world.js dist/hello-world.wasm
# The compiled WASM can now be deployed to CRE
The repo includes pre-compiled Javy binaries. If you encounter Apple security issues:
# Remove quarantine attribute
xattr -d com.apple.quarantine ./bin/javy-arm-macos-v5.0.4
# Make executable
chmod +x ./bin/javy-arm-macos-v5.0.4
# Verify installation
./bin/javy-arm-macos-v5.0.4 --version
# Make executable
chmod +x ./bin/javy-arm-linux-v5.0.4
# Verify installation
./bin/javy-arm-linux-v5.0.4 --version
The Javy Chainlink SDK plugin exposes host functions to guest workflows:
wasm32-wasip1
target# Install Rust WASM target
rustup target add wasm32-wasip1
# Install wasm-tools for debugging
cargo install --locked wasm-tools
# Build the plugin
bun run build
# Or manually build the Rust plugin
cd src/javy_chainlink_sdk
cargo build --target wasm32-wasip1 --release
After building, you'll find:
dist/javy_chainlink_sdk.wasm
- The compiled plugindist/workflow.wit
- WebAssembly Interface Types definitionsUse wasm-tools
to inspect compiled workflows:
# Validate a compiled workflow
wasm-tools component targets --world workflow src/workflow.wit dist/workflow.wasm
# Print WASM structure
wasm-tools print dist/workflow.wasm
The plugin uses these configuration files:
src/javy_chainlink_sdk/Cargo.toml
- Rust dependencies and build configsrc/workflow.wit
- WebAssembly Interface Types for CRE workflowsbin/compile-workflow.ts
- Workflow compilation logicbin/setup.ts
- One-time setup scriptwasm32-wasip1
src/
├── javy_chainlink_sdk/ # Rust plugin source
│ ├── src/lib.rs # Plugin implementation
│ └── Cargo.toml # Rust dependencies
├── workflow.wit # WASM interface definitions
bin/
├── setup.ts # Setup script
└── compile-workflow.ts # Compilation script
# Run plugin tests
cd src/javy_chainlink_sdk
cargo test
# Test compilation with example workflow
bunx cre-compile-workflow examples/hello-world.js test-output.wasm
src/javy_chainlink_sdk/
bun run build
bunx cre-compile-workflow <test-file> <output>
wasm-tools print <output>
See LICENSE in LICENSE.md
FAQs
Chainlink CRE SDK Javy Plugin.
The npm package @chainlink/cre-sdk-javy-plugin receives a total of 317 weekly downloads. As such, @chainlink/cre-sdk-javy-plugin popularity was classified as not popular.
We found that @chainlink/cre-sdk-javy-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.