
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.
@fortmatic/fortmatic-web3
Advanced tools
This is the Ethereum JavaScript API which connects to the Generic JSON RPC spec.
You need to run a local or remote Ethereum node to use this library.
Please read the documentation for more.
npm install web3
yarn add web3
Note: works only in the Browser for now. (PR welcome).
meteor add ethereum:web3
Use the prebuild dist/web3.min.js, or
build using the web3.js repository:
npm run-script build
Then include dist/web3.js in your html file.
This will expose Web3 on the window object.
// in node.js
var Web3 = require('web3');
var web3 = new Web3('ws://localhost:8546');
console.log(web3);
> {
eth: ... ,
shh: ... ,
utils: ...,
...
}
Additionally you can set a provider using web3.setProvider() (e.g. WebsocketProvider):
web3.setProvider('ws://localhost:8546');
// or
web3.setProvider(new Web3.providers.WebsocketProvider('ws://localhost:8546'));
There you go, now you can use it:
web3.eth.getAccounts()
.then(console.log);
Type definitions are maintained at DefinitelyTyped by others. You can install them with:
npm install --dev @types/web3.js
You might need to install type definitions for bignumber.js and lodash too.
And then use web3.js as follows:
import Web3 = require("web3"); // Note the special syntax! Copy this line when in doubt!
const web3 = new Web3("ws://localhost:8546");
Please note: We do not support TypeScript ourselves. If you have any issue with TypeScript and web3.js do not create an issue here. Go over to DefinitelyTyped and do it there.
Documentation can be found at read the docs.
sudo apt-get update
sudo apt-get install nodejs
sudo apt-get install npm
Build only the web3.js package
npm run-script build
Or build all sub packages as well:
npm run-script build-all
This will put all the browser build files into the dist folder.
npm test
[1.2.2]
eth.getChainId method (#3113)connected event on subscription creation (#3028)0 as a valid fromBlock or toBlock filter param (#1100)null (#2183)net_version when signing txs (#2378)tx object passed to function signTransaction (#2190)FAQs
Ethereum JavaScript API wrapper repository
We found that @fortmatic/fortmatic-web3 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.