
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@orderly.network/onramper-plugin
Advanced tools
A fiat-to-crypto on-ramp plugin for the Orderly SDK. Adds a "Buy Crypto" tab to the Transfer dialog, allowing users to purchase USDC with fiat currencies through Onramper.
Buy USDC directly within the Orderly trading interface. Users enter a spend amount in fiat, choose a payment method and on-ramp provider, and complete the purchase through a secure embedded widget.
Receive USDC on multiple networks including Ethereum, Arbitrum, Base, Optimism, Polygon, Avalanche, zkSync, Solana, BNB Chain, Linea, and more.
Real-time exchange rates from multiple on-ramp providers (Moonpay, Transak, Banxa, etc.), auto-refreshed every 30 seconds. Compare rates side-by-side and pick the best deal.
Supports multiple payment methods per provider — credit/debit cards, bank transfers, and more. Displays min/max spend limits for each method.
Track on-ramp transaction status (pending, completed, failed) with automatic polling. Requires the optional Cloudflare Worker backend.
Screenshots are available in docs/screenshots/.
npm install @orderly.network/onramper-plugin
# or
pnpm add @orderly.network/onramper-plugin
# or
yarn add @orderly.network/onramper-plugin
import { registerOnrampPlugin } from "@orderly.network/onramper-plugin";
import "@orderly.network/onramper-plugin/dist/styles.css";
const plugins = [
registerOnrampPlugin({
apiKey: "YOUR_ONRAMPER_API_KEY",
secretKey: "YOUR_ONRAMPER_SECRET_KEY",
workerUrl: "https://your-worker.your-domain.workers.dev", // optional, enables transaction history
}),
];
Then pass the plugins array to OrderlyAppProvider:
<OrderlyAppProvider
plugins={plugins}
configStore={configStore}
// ...other props
>
{children}
</OrderlyAppProvider>
| Option | Type | Required | Description |
|---|---|---|---|
apiKey | string | Yes | Onramper API key |
secretKey | string | Yes | Onramper secret key for HMAC URL signing |
workerUrl | string | No | Cloudflare Worker URL for transaction history |
title | string | No | Tab title (default: "Buy Crypto") |
icon | ReactNode | No | Custom tab icon |
This plugin requires the following Orderly SDK packages:
@orderly.network/hooks@orderly.network/plugin-core@orderly.network/i18n@orderly.network/types@orderly.network/ui@orderly.network/utilsreact >= 18react-dom >= 18A Cloudflare Worker is needed to receive Onramper webhooks and enable transaction history in the plugin. All setup is done through the Cloudflare Dashboard.
Create a D1 Database — Go to Workers & Pages → D1 SQL Database, create a new database. Open its console and run the SQL from cloudflare-worker/schema.sql to create the table.
Create the Worker — Go to Workers & Pages → Create Worker. Replace the default script with the contents of cloudflare-worker/index.js.
Bind the D1 Database — In the Worker's Settings → Bindings, add a D1 Database binding with variable name DB, pointing to the database from step 1.
Add the Webhook Secret — In the Worker's Settings → Variables and Secrets, add an encrypted variable named ONRAMPER_WEBHOOK_SECRET with your webhook secret from the Onramper dashboard.
Configure Onramper Webhook — In the Onramper Dashboard, set your webhook URL to the deployed Worker URL.
Use in Plugin — Pass the Worker URL as workerUrl when registering the plugin.
FAQs
Onramper plugin for Orderly
We found that @orderly.network/onramper-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.