Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@vechain/connex
Advanced tools
The out of the box Connex implementation for browser.
<script>
tagJust include the CDN link within a script tag. Connex
will then be registered as a global variable.
<!-- install the latest v2 -->
<script src="https://unpkg.com/@vechain/connex@2" />
It's recommended for larger projects.
npm i @vechain/connex
import Connex from '@vechain/connex'
Connex was composed with two parts, Connex.Thor
and Connex.Vendor
, the former is the blockchain access layer, the latter is the vendor(signer) specific layer.
Connects to mainnet.
const thor = new Connex.Thor({
node: 'https://mainnet.veblocks.net/', // veblocks public node, use your own if needed
network: 'main' // defaults to mainnet, so it can be omitted here
})
Connects to testnet.
const thor = new Connex.Thor({
node: 'https://testnet.veblocks.net/',
network: 'test'
})
Or connect to a private network
const thor = new Connex.Thor({
node: '<the API url of your node>',
// the genesis block of your private network
network: {
id: '0x...',
...
}
})
Vendor module handles user's signing requests. It's designed to be pluggable, so you can use your own vendor module, or use the built-in vendor module. For example, 'Buy me a coffee' is a classic demo for a vendor only app.
/**
* @param network 'main' or 'test' or genesis ID if it's private network
* @param signer 'sync2' or 'sync'(sync and vechainthor mobile wallet), 'sync2' will be used if omitted
*/
// will throw error if signer is not supported.
const vendor = new Connex.Vendor('main', 'sync2') // create a sync2 vendor for mainnet
const vendor = new Connex.Vendor('test', 'sync') // sync or vechainthor mobile wallet
Wallets:
sync2
sync
sync
const connex = new Connex({
node: 'https://mainnet.veblocks.net/',
network: 'main',
signer: 'sync2'
})
// read best block
const best = await connex.thor.block().get()
// sign a transaction
const res = await connex.vendor.sign('tx', [{
to: '0x...',
value: 0x0,
data: '0x...'
}]).request()
// composed by thor and vendor
const {thor, vendor} = connex
This package, @vechain/connex is designed only work in the browser, if you are interested in running it in Node.js, try @vechain/connex-framework.
This package is licensed under the GNU Lesser General Public License v3.0, also included in LICENSE file in the repository.
FAQs
Standard interface to connect DApp with VeChain and user
The npm package @vechain/connex receives a total of 466 weekly downloads. As such, @vechain/connex popularity was classified as not popular.
We found that @vechain/connex demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.