
Security News
Bun 1.2.19 Adds Isolated Installs for Better Monorepo Support
Bun 1.2.19 introduces isolated installs for smoother monorepo workflows, along with performance boosts, new tooling, and key compatibility fixes.
@stellar/stellar-base
Advanced tools
The stellar-base library is the lowest-level stellar helper library. It consists of classes to read, write, hash, and sign the xdr structures that are used in stellar-core. This is an implementation in JavaScript that can be used on either Node.js or web browsers.
Warning! The Node version of this package uses the
sodium-native
package, a native implementation of Ed25519 in Node.js, as an optional dependency. This means that if for any reason installation of this package fails,stellar-base
will fallback to the much slower implementation contained intweetnacl
.If you'd explicitly prefer not to install the
sodium-native
package, pass the appropriate flag to skip optional dependencies when installing this package (e.g.--no-optional
if usingnpm install
or--without-optional
usingyarn install
).If you are using
stellar-base
in a browser you can ignore this. However, for production backend deployments you should most likely be usingsodium-native
. Ifsodium-native
is successfully installed and working,StellarBase.FastSigning
variable will be equaltrue
. Otherwise it will befalse
.
Using yarn to include js-stellar-base in your own project:
yarn add @stellar/stellar-base
For browsers, use Bower to install it. It exports a
variable StellarBase
. The example below assumes you have stellar-base.js
relative to your html file.
<script src="stellar-base.js"></script>
<script>
console.log(StellarBase);
</script>
yarn add @stellar/stellar-base
var StellarBase = require('@stellar/stellar-base');
bower install stellar-base
<script src="./bower_components/stellar-base/stellar-base.js"></script>
<script>
console.log(StellarBase);
</script>
If you don't want to use install Bower, you can copy built JS files from the bower-js-stellar-base repo.
<script src="https://cdnjs.cloudflare.com/ajax/libs/stellar-base/{version}/stellar-base.js"></script>
<script>
console.log(StellarBase);
</script>
Note that this method relies using a third party to host the JS library. This may not be entirely secure.
Make sure that you are using the latest version number. They can be found on the releases page in Github.
We support the oldest LTS release of Node, which is currently 18.x. Please likewise install and develop on Node 16 so you don't get surprised when your code works locally but breaks in CI.
If you work on several projects that use different Node versions, you might find helpful to install a NodeJS version manager:
This project uses Yarn to manages its dependencies. To install Yarn, follow the project instructions available at https://yarnpkg.com/en/docs/install.
git clone https://github.com/stellar/js-stellar-base.git
cd js-stellar-base
yarn
While you're making changes, make sure to regularly run the linter to catch any linting errors (in addition to making sure your text editor supports ESLint)
yarn lint
as well as fixing any formatting errors with
yarn fmt
If you're working on a file not in src
, limit your code to Node 6.16 ES! See
what's supported here: https://node.green/. (Our npm library must support
earlier versions of Node, so the tests need to run on those versions.)
make reset-xdr
For information on how to use js-stellar-base, take a look at the docs in the docs folder.
To run all tests:
yarn test
To run a specific set of tests:
yarn test:node
yarn test:browser
Tests are also run automatically in Github Actions for every master commit and pull request.
Documentation for this repo lives inside the docs folder.
Please see the CONTRIBUTING.md for details on how to contribute to this project.
npm version [<newversion> | major | minor | patch | premajor | preminor | prepatch | prerelease]
A new version will be published to npm and Bower by GitHub Actions.
npm >= 2.13.0 required. Read more about npm version.
js-stellar-base is licensed under an Apache-2.0 license. See the LICENSE file for details.
nativeToScVal
now supports encoding Keypair
s as addresses (#794).authorizeEntry
, the SigningCallback
callback function should now return an object containing both the signature and the identity of the signer. In multi-signature situations, it isn't necessarily the case that the address within the authorization entry is the one that actually signs that entry. Thus, the callback now takes the following form, where the original Promise<BufferLike>
option is preserved for backwards compatibility and should be considered deprecated (#783):export type SigningCallback = (
preimage: xdr.HashIdPreimage
) => Promise<
BufferLike |
{ signature: BufferLike, publicKey: string }
>;
scValToNative
will decode addresses more efficiently and reliably (#794).FAQs
Low-level support library for the Stellar network.
The npm package @stellar/stellar-base receives a total of 71,665 weekly downloads. As such, @stellar/stellar-base popularity was classified as popular.
We found that @stellar/stellar-base demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Bun 1.2.19 introduces isolated installs for smoother monorepo workflows, along with performance boosts, new tooling, and key compatibility fixes.
Security News
Popular npm packages like eslint-config-prettier were compromised after a phishing attack stole a maintainer’s token, spreading malicious updates.
Security News
/Research
A phishing attack targeted developers using a typosquatted npm domain (npnjs.com) to steal credentials via fake login pages - watch out for similar scams.