
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
arweave-synchronizer
Advanced tools
A cool tool to process and sync all transactions from a custom GQL query in order to gather metrics for from a specific data protocol.
A cool tool to process and sync all transactions from a custom GQL query in order to gather metrics for from a specific data protocol.
$ npm install arweave-synchronizer
or
$ yarn add arweave-synchronizer
import Synchronizer from 'arweave-synchronizer';
const sync = new Synchronizer([
{ name: "Protocol-Name", values: "Account-0.2" },
{ name: "Signing-Client", values: "ArConnect" }
]);
sync.on('response', ({txs, txCounter}) => {
// process the page of transactions here
});
sync.start(); // This must be called at the end
| argument | default |
|---|---|
| Tags array (GQLTagInterface[]) | x |
| Txs per query | 100 |
| Delay between queries (ms) | 5000 |
⚠️ Event listeners must be set before
sync.start()method is called or it won't work.
In chronological order:
start:sync.on('start', () => console.log(" 🚦 Starting the synchronizer..."));
request:sync.on('request', () => console.log(" 🔄 Requesting transactions, waiting for response..."));
exception:sync.on('exception', (e) => console.log(` ❌ ${e.message}`));
response:sync.on('response', ({txs, txCounter, timestamp, cursor}) => {
// process the transactions page
});
synchronized:sync.on('synchronized', () => console.log(" ✅ The node has synchronized with the Blockweave."));
You can get the current status:
console.log(sync.getStatus()) // return "stopped", "syncing" or "synced"
txCounter in a flat file so stopping synchronization doesn't require to start over from the beginningFAQs
A cool tool to process and sync all transactions from a custom GQL query in order to gather metrics for from a specific data protocol.
We found that arweave-synchronizer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.