Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@metaid/metaid
Advanced tools
MetaID is a library for MetaID protocol. It provides a set of functions to manage the DID document and the DID transaction.
The MetaID SDK provides a set of standard specifications and method tools for generating and processing underlying blockchain data that follows the MetaID protocol (specifically referring to chains that comply with the UTXO standard, currently supporting the BTC chain).
The MetaID SDK has two core concepts: connector and entity.
Connectors are used for the authentication and management of identity information, serving as the foundation for users to publish data on the blockchain.
"Entity" is a term used in the application layer. It is used to manage resources of a specific data type. From a programming perspective, when you create a new entity instance, you can access its properties and use a series of executable methods provided for data storage and modification on the chain. You can understand each type of Entity as corresponding to the PATH part in the MetaID Specification.
Currently, we only recommend installing the SDK using yarn.
yarn add @metaid/metaid
Warning:The API examples listed below are still under development. Use with caution.
import { btcConnect } from '@metaid/metaid'
const _wallet = await MetaletWalletForBtc.create()
const _network = (await window.metaidwallet.getNetwork()).network
const _btcConnector = await btcConnect({
network,
wallet: _wallet,
})
Note: you can connect an empty object. At this point, you can only use entity to retrieve data from blockchain but cannot store data.
// create a buzz enity with connector's use method
const buzzEntity = await _btcConnector.use('buzz')
// create
const finalBody = { content: 'Hello World' }
const createRes: createRes = await buzzEntity.create({
data: [{ body: JSON.stringify(finalBody) }],
options: { noBroadcast: 'no', feeRate: selectFeeRate?.number },
})
// type of CreateRes
type CreateRes: {
commitTxId: string;
revealTxIds: string[];
commitCost: string;
revealCost: string;
status?: string | undefined;
}
const fileSchema = {
name: 'file',
nodeName: 'metafile',
encoding: 'binary',
versions: [
{
version: '1.0.1',
body: '',
},
],
}
type FileData = {
body?: string | Buffer | undefined
contentType?: string | undefined
encryption?: '0' | '1' | '2' | undefined
version?: string | undefined
encoding?: BufferEncoding | undefined
}
const finalBody = { content: 'Hello World' }
if (!isEmpty(buzz.images)) {
const fileOptions: FileData[] = []
const fileEntity = await btcConnector!.use('file')
for (const image of buzz.images) {
fileOptions.push({
body: Buffer.from(image.data, 'hex').toString('base64'),
contentType: 'image/jpeg;binary',
encoding: 'base64',
})
}
const imageRes = await fileEntity.create({
dataArray: fileOptions,
options: { noBroadcast: 'no', feeRate: selectFeeRate?.number },
})
console.log('imageRes', imageRes)
finalBody.attachments = imageRes.revealTxIds.map((rid) => 'metafile://' + rid + 'i0')
}
await sleep(5000)
console.log('finalBody', finalBody)
const createRes = await buzzEntity.create({
dataArray: [{ body: JSON.stringify(finalBody) }],
options: { noBroadcast: 'no', feeRate: selectFeeRate?.number },
})
import {
MvcTransaction
MetaletWalletForMvc,
mvcConnect,
} from '@metaid/metaid'
const _wallet = await MetaletWalletForMvc.create()
const mvcConnector = await mvcConnect({ wallet: _wallet, network: 'testnet' })
const buzzEntity = mvcConnector.use('buzz')
const fileEntity = mvcConnector.use('file')
let body = { content }
let fileTransactions: MvcTransaction[] = []
if (!isNil(attachments) && !isEmpty(attachments)) {
const attachMetafileUri = []
// console.log("file", "start");
for (const image of attachments) {
const { transactions: txs } = await fileEntity.create({
data: {
body: Buffer.from(image.data, 'base64') // Please note that this is different from the BTC version
contentType: `${image.fileType};binary`,
encoding: 'base64',
flag: 'metaid',
},
options: {
network: 'testnet',
signMessage: 'upload image file',
serialAction: 'combo',
transactions: fileTransactions,
},
})
attachMetafileUri.push('metafile://' + txs[txs.length - 1].txComposer.getTxId() + 'i0')
fileTransactions = txs
console.log('fileTransactions: ', fileTransactions)
}
body.attachments = attachMetafileUri
}
const { txid } = await buzzEntity.create({
data: { body: JSON.stringify(body), contentType: 'application/json;utf-8', flag: 'metaid' },
options: {
signMessage: 'create buzz',
serialAction: 'finish',
transactions: fileTransactions,
network: 'testnet',
},
})
const likeSchema = {
name: 'like',
nodeName: 'PayLike',
versions: [
{
version: 1,
body: [
{
name: 'likeTo',
type: 'string',
},
{
name: 'isLike',
type: 'string',
},
],
},
],
}
const likeEntity = await btcConnector.use('like')
const likeRes = await likeEntity.create({
dataArray: [
{
body: JSON.stringify({ isLike: '1', likeTo: pinId }),
},
],
options: {
noBroadcast: 'no',
feeRate: Number(globalFeeRate),
},
})
import { EntitySchema } from '@metaid/metaid'
const followSchema: EntitySchema = {
name: 'follow',
nodeName: 'follow',
path: '/follow',
versions: [
{
version: 1,
body: [
{
name: 'followTo',
type: 'string',
},
],
},
],
}
import { loadMvc } from '@metaid/metaid' // loadBtc form btc chain
import followSchema from '@/metaid-entities/follow.entity.js' // assume @/metaid-entities/follow.entity.js is the location where your place follow.entity.ts file, you need to impport .js type
const followEntity = await loadMvc(followSchema, { connector: MvcConnector}) // You can pass MvcConnector as optional parameter
const followrRes = await followEntity.create({
data:
{
body: "follow-to-metaid",
contentType: 'text/plain;utf-8',
},
options:
{
network: 'testnet'
signMessage: 'follow user'
}
})
Can have multiple wallet implementations as long as it implements the Wallet
interface.
First, we need to build a wallet object based on the current logged-in wallet account.Then we can access the public properties of the wallet object and a series of methods provided by the wallet object (assuming the wallet is connected, otherwise return {status: 'not-connected'}
)
import { MetaletWalletForBtc } from '@metaid/metaid'
// use static method `create` to create a wallet instance
const _wallet = await MetaletWalletForBtc.create()
const address = _wallet.address
const pubicKey = _wallet.pub
await _wallet.getBalance()
params: none
return: {total: number, confirmed: number, unconfirmed: number}
await _wallet.signMessage(message)
await _wallet.signPsbt({
psbtHex,
options,
}: {
psbtHex: string
options?: { toSignInputs?: ToSignInput[]; autoFinalized: boolean }
})
export type Operation = 'create' | 'modify' | 'revoke'
export type Encryption = '0' | '1' | '2'
export type MetaidData = {
operation: Operation
body?: string | Buffer
path?: string
contentType?: string
encryption?: '0' | '1' | '2'
version?: string
encoding?: BufferEncoding
revealAddr: string
}
export type InscriptionRequest = {
feeRate: number;
metaidDataList: MetaidData[];
revealOutValue: number;
changeAddress: string;
minChangeValue?: number;
}
await _wallet.insrcibe({data, options} : \
{ data: InscriptionRequest, options: {noBroadcast : boolean })
The insrcibe method returns different transaction data formats based on whether the parameters are broadcast or not, specifically:
When noBrobroadcast is set to no, the return format is
{
commitTxHex: string;
revealTxsHex: string[];
commitCost: string;
revealCost: string;
}
When noBrobroadcast is set to yes, i.e. not broadcasting transactions, the return format is:
{
commitTxId: string;
revealTxIds: string[];
commitCost: string;
revealCost: string;
}
In case of non-broadcast transactions, the transaction result is returned in the form of txHex; otherwise, the transaction result is returned in the form of txid. The sum of commitCost and revealCost is the estimated fee required for the current transaction to be engraved.
Warining: This is the underlying engraving API method. It is not recommended to call it directly unless you have very customized engraving requirements.
A connector is the bridge between your wallet and the entity.
type BtcNetwork = "testnet" | "regtest" | "livenet"
import { IMetaletWalletForBtc, IBtcConnector, btcConnect } from "@metaid/metaid";
const _btcConnector:IMetaletWalletForBtc = await btcConnect({ wallet, network }: { wallet?: IMetaletWalletForBtc; network: BtcNetwork });
const metaid = _btcConnector.metaid
export type UserInfo = {
number: number
rootTxId: string
name: string
nameId: string
address: string
avatar: string | null
avatarId: string
bio: string
bioId: string
soulbondToken: string
unconfirmed: string
isInit: boolean
metaid: string
}
const user: UserInfo = _btcConnecto.user
type Operation = 'create' | 'modify' | 'revoke'
type InscribeData = {
operation: Operation;
body?: string | Buffer;
path?: string;
contentType?: string;
encryption?: "0" | "1" | "2";
version?: string;
encoding?: BufferEncoding;
flag?: "metaid" ;
}
await _btcConnector.inscribe({
inscribeDataArray,
options,
}: {
inscribeDataArray: InscribeData[]
options: {
noBroadcast: T
feeRate?: number
service?: {
address: string
satoshis: string
}
}
})
The return type of this method is the same as the return type of the wallet's inscribe method.
export interface InscribeResultForYesBroadcast {
commitTxId: string
revealTxIds: string[]
commitCost: string
revealCost: string
status?: string
}
createUserInfo({
userData,
options,
}: {
userData: {
name: string
bio?: string
avatar?: string
}
options: {
network?: BtcNetwork
feeRate?: number
service?: {
address: string
satoshis: string
}
}
}): Promise<{
nameRes: InscribeResultForYesBroadcast
bioRes: InscribeResultForYesBroadcast | undefined
avatarRes: InscribeResultForYesBroadcast | undefined
}>
const user = await _btcConnector.getUser({ network, currentAddress }: { network: BtcNetwork; currentAddress?: string })
export interface InscribeResultForYesBroadcast {
commitTxId: string
revealTxIds: string[]
commitCost: string
revealCost: string
status?: string
}
updateUserInfo({
userData,
options,
}: {
userData?: {
name?: string
bio?: string
avatar?: string
}
options?: {
network?: BtcNetwork
feeRate?: number
service?: {
address: string
satoshis: string
}
}
}): Promise<{
nameRes: InscribeResultForYesBroadcast | undefined
bioRes: InscribeResultForYesBroadcast | undefined
avatarRes: InscribeResultForYesBroadcast | undefined
}>
const isConnected = await _btcConnector.isConnectoed()
await _btcConnector.disconnect()
// example:create buzz Enitity
await _btcConnector.use(entitySymbol: string)
Return the entity object, as detailed below.
An entity is a controller class to operate on a specific resource.Once a class entity is created through a connector, you can access a series of properties and methods provided by that class entity.
Currently, the MetaID SDK provides common basic entity calls based on the on-chain Weibo example application, including buzzEntity, fileEntity, likeEntity. If developers have their own customization requirements, they can create their own data protocol on the MetaProtocols official website, and the MetaID SDK will automatically create relevant entities for that protocol.
In the following, we take creating buzzEntity as an example
const buzzEntity = await _btcConnector.use('buzz')
const allBuzz = await buzzEntity.list({ page, limit, network }: { page: number; limit: number; network?: BtcNetwork })
const pid = 'XXXXXXXXX'
const pinDetail = await buzzEntity.one({ pid, network }: { pid: string; network: BtcNetwork })
const pinTotal = await buzzEntity.total({ network }: { network?: BtcNetwork })
create<T extends keyof InscribeResultForIfBroadcasting>({ data, options, }: {
dataArray: SubMetaidData[];
options: {
noBroadcast: T;
feeRate?: number;
service?: {
address: string;
satoshis: string;
};
};
}): Promise<InscribeResultForIfBroadcasting[T]>
type SubMetaidData = {
body?: string | Buffer;
contentType?: string;
encryption?: "0" | "1" | "2";
version?: string;
encoding?: BufferEncoding;
flag?: "metaid" ;
}
const createRes = await buzzEntity.create({
dataArray,
options,
}: {
dataArray: SubMetaidData[]
options: {
noBroadcast: T;
feeRate?: number;
service?: {
address: string;
satoshis: string;
};
};
})
The return type of this method is the same as the return type of the wallet's inscribe method
A resource is a data object that represents a specific entity.
entity.list()
returns an array of resources.
entity.one()
returns a single resource.
type Resource = {
txid: string
createdAt: timestamp
body: Record<string, any>
// We wrap the resource's owner info in a `user` object.
user: {
metaid: string
name: string
avatar: string
}
}
FAQs
MetaID is a library for MetaID protocol. It provides a set of functions to manage the DID document and the DID transaction.
We found that @metaid/metaid demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.