
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@digitalbits-blockchain/xdb-digitalbits-base
Advanced tools
The @digitalbits-blockchain/xdb-digitalbits-base library is the lowest-level digitalbits helper library. It consists of classes to read, write, hash, and sign the xdr structures that are used in digitalbits-core. This is an implementation in JavaScript that can be used on either Node.js or web browsers.
Warning! The Node version of this package uses the
sodium-nativepackage, a native implementation of Ed25519 in Node.js, as an optional dependency. This means that if for any reason installation of this package fails,@digitalbits-blockchain/xdb-digitalbits-basewill fallback to the much slower implementation contained intweetnacl.If you'd explicitly prefer not to install the
sodium-nativepackage, pass the appropriate flag to skip optional dependencies when installing this package (e.g.--no-optionalif usingnpm installor--without-optionalusingyarn install).If you are using
@digitalbits-blockchain/xdb-digitalbits-basein a browser you can ignore this. However, for production backend deployments you should most likely be usingsodium-native. Ifsodium-nativeis successfully installed and working,DigitalBitsBase.FastSigningvariable will be equaltrue. Otherwise it will befalse.
Using yarn to include @digitalbits-blockchain/xdb-digitalbits-base in your own project:
yarn add @digitalbits-blockchain/xdb-digitalbits-base
For browsers, use Bower to install it. It exports a
variable DigitalBitsBase. The example below assumes you have xdb-digitalbits-base.js
relative to your html file.
<script src="xdb-digitalbits-base.js"></script>
<script>
console.log(DigitalBitsBase);
</script>
yarn add @digitalbits-blockchain/xdb-digitalbits-base
var DigitalBitsBase = require('@digitalbits-blockchain/xdb-digitalbits-base');
We support the oldest LTS release of Node, which is currently 14.x. Please likewise install and develop on Node 14 so you don't get surprised when your code works locally but breaks in CI.
If you work on several projects that use different Node versions, you might find helpful to install a nodejs version manager.
This project uses Yarn to manages its dependencies. To install Yarn, follow the project instructions available at https://yarnpkg.com/en/docs/install.
git clone https://github.com/xdbfoundation/xdb-digitalbits-base.git
cd xdb-digitalbits-base
yarn
While you're making changes, make sure to run the linter-watcher to catch any linting errors (in addition to making sure your text editor supports ESLint)
node_modules/.bin/gulp watch
If you're working on a file not in src, limit your code to Node 6.16 ES! See
what's supported here: https://node.green/ (The reason is that our npm library
must support earlier versions of Node, so the tests need to run on those
versions.)
make reset-xdrFor information on how to use @digitalbits-blockchain/xdb-digitalbits-base, take a look at the docs in the docs folder.
To run all tests:
gulp test
To run a specific set of tests:
gulp test:node
gulp test:browser
You can also run yarn test for a simpler subset of the test cases.
Tests are also run automatically in Github Actions for every master commit and pull request.
Documentation for this repo lives inside the docs folder.
Please see the CONTRIBUTING.md for details on how to contribute to this project.
npm version [<newversion> | major | minor | patch | premajor | preminor | prepatch | prerelease]
A new version will be published to npm and Bower by GitHub Actions.
npm >= 2.13.0 required. Read more about npm version.
@digitalbits-blockchain/xdb-digitalbits-base is licensed under an Apache-2.0 license. See the LICENSE file for details.
FAQs
Low level digitalbits support library
The npm package @digitalbits-blockchain/xdb-digitalbits-base receives a total of 2 weekly downloads. As such, @digitalbits-blockchain/xdb-digitalbits-base popularity was classified as not popular.
We found that @digitalbits-blockchain/xdb-digitalbits-base demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.