
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@kinecosystem/kin-sdk
Advanced tools
kin-sdk is a library for working with the Stellar Horizon server on Kin Network.
Note: this is a fork of the original Stellar SDK. This fork has been modified to be compatible with the Kin fork of the Stellar Network.
js-kin-sdk is a JavaScript library for communicating with a Stellar Horizon server. It is used for building Kin apps either on Node.js or in the browser.
It provides:
Warning! Node version of
kin-base(kin-sdkdependency) package is usinged25519package, a native implementation of Ed25519 in Node.js, as an optional dependency. This means that if for any reason installation of this package fails,kin-base(andkin-sdk) will fallback to the much slower implementation contained intweetnacl.If you are using
kin-sdk/kin-basein a browser you can ignore this. However, for production backend deployments you should definitely be usinged25519. Ifed25519is successfully installed and workingKinSdk.FastSigningvariable will be equaltrue. Otherwise it will befalse.
js-kin-sdk is a high-level library that serves as client side API for Horizon. This library makes extensive use of the lower-level js-kin-base and exposes js-kin-base classes via its export object. js-kin-base can be used as a standalone library for creating Stellar primitive constructs via XDR helpers and wrappers. js-kin-base doesn't depend on connecting to Horizon.
js-kin-sdk exposes all js-kin-base classes so you don't have to install js-kin-base along js-kin-sdk.
Using npm to include js-kin-sdk in your own project:
npm install --save @kinecosystem/kin-sdk
For browsers, use Bower to install js-kin-sdk. It exports a
variable KinSdk. The example below assumes you have kin-sdk.js
relative to your html file.
<script src="kin-sdk.js"></script>
<script>console.log(KinSdk);</script>
npm install --save @kinecosystem/kin-sdk
var SdkSdk = require('@kinecosystem/kin-sdk');
Unfortunately, the Stellar platform development team mostly works on OS X and Linux, and so sometimes bugs creep through that are specific to windows. When installing stellar-sdk on windows, you might see an error that looks similar to the following:
error MSB8020: The build tools for v120 (Platform Toolset = 'v120 ') cannot be found. To build using the v120 build tools, please install v120 build tools. Alternatively, you may upgrade to the current Visual Studio tools by selecting the Project menu or right-click the solution, and then selecting "Retarget solution"
To resolve this issue, you should upgrade your version of nodejs, node-gyp and then re-attempt to install the offending package using npm install -g --msvs_version=2015 ed25519. Afterwards, retry installing stellar-sdk as normal.
If you encounter the error: "failed to find C:\OpenSSL-Win64", You need to install OpenSSL. More information about this issue can be found here.
In the event the above does not work, please join us on our community slack to get help resolving your issue.
bower install kin-sdk
<script src="./bower_components/kin-sdk/kin-sdk.js"></script>
<script>console.log(KinSdk);</script>
If you don't want to use install Bower, you can copy built JS files from the bower-js-kin-sdk repo.
Make sure that you are using the latest version number. They can be found on the releases page in Github.
git clone https://github.com/kinecosystem/js-kin-sdk.git
cd js-kin-sdk
npm install
For information on how to use js-kin-sdk, take a look at the Stellar Developers site.
There is also API Documentation here.
To run all tests:
gulp test
To run a specific set of tests:
gulp test:node
gulp test:browser
gulp test:integration
Documentation for this repo lives in Stellar Developers site.
npm version [<newversion> | major | minor | patch | premajor | preminor | prepatch | prerelease]
A new version will be published to npm and Bower by Travis CI.
npm >=2.13.0 required. Read more about npm version.
js-kin-sdk is licensed under an Apache-2.0 license. See the LICENSE file for details.
FAQs
kin-sdk is a library for working with the Stellar Horizon server on Kin Network.
We found that @kinecosystem/kin-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.