
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@kinecosystem/kin-base
Advanced tools
The kin-base library is the lowest-level Kin helper library. It consists of classes to read, write, hash, and sign the xdr structures that are used in Kin stellar-core. This is an implementation in JavaScript that can be used on either Node.js or web browsers.
Warning! Node version of this package is using
ed25519package, a native implementation of Ed25519 in Node.js, as an optional dependency. This means that if for any reason installation of this package fails,kin-basewill fallback to the much slower implementation contained intweetnacl.If you are using
kin-basein a browser you can ignore this. However, for production backend deployments you should definitely be usinged25519. Ifed25519is successfully installed and workingKinBase.FastSigningvariable will be equaltrue. Otherwise it will befalse.
Using npm to include js-kin-base in your own project:
npm install --save @kinecosystem/kin-base
For browsers, use Bower to install it. It exports a
variable KinBase. The example below assumes you have kin-base.js
relative to your html file.
<script src="kin-base.js"></script>
<script>console.log(KinBase);</script>
npm install --save @kinecosystem/kin-base
var KinBase = require('kin-base');
bower install kin-base
<script src="./bower_components/kin-base/kin-base.js"></script>
<script>console.log(KinBase);</script>
If you don't want to use install Bower, you can copy built JS files from the bower-js-kin-base repo.
Make sure that you are using the latest version number. They can be found on the releases page in Github.
git clone https://github.com/kinecosystem/js-kin-base.git
cd js-kin-base
npm install
For information on how to use js-kin-base, take a look at the docs in the docs folder.
To run all tests:
gulp test
To run a specific set of tests:
gulp test:node
gulp test:browser
Tests are also run on the Travis CI js-stellar-base project automatically.
Documentation for this repo lives inside the docs folder.
npm version [<newversion> | major | minor | patch | premajor | preminor | prepatch | prerelease]
A new version will be published to npm and Bower by Travis CI.
npm >=2.13.0 required. Read more about npm version.
js-kin-base is licensed under an Apache-2.0 license. See the LICENSE file for details.
FAQs
Low level Kin support library
We found that @kinecosystem/kin-base demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.