
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
TronWeb aims to deliver a unified, seamless development experience influenced by Ethereum's Web3 implementation. We have taken the core ideas and expanded upon it to unlock the functionality of TRON's unique feature set along with offering new tools for integrating DApps in the browser, Node.js and IoT devices.
You can access either version specifically from the dist folder.
TronWeb is also compatible with frontend frameworks such as:
You can also ship TronWeb in a Chrome extension.
npm install tronweb
or
yarn add tronweb
First, don't use the release section of this repo, it has not updated in a long time.
Then easiest way to use TronWeb in a browser is to install it as above and copy the dist file to your working folder. For example:
cp node_modules/tronweb/dist/TronWeb.js ./js/tronweb.js
so that you can call it in your HTML page as
<script src="./js/tronweb.js"><script>
Shasta is the official Tron testnet. To use it use the following endpoint:
https://api.shasta.trongrid.io
Get some Shasta TRX at https://www.trongrid.io/shasta and play with it. Anything you do should be explorable on https://shasta.tronscan.org
You can set up your own private network, running Tron Quickstart. To do it you must install Docker and, when ready, run a command like
docker run -it --rm \
-p 9090:9090 \
-e "defaultBalance=100000" \
-e "showQueryString=true" \
-e "showBody=true" \
-e "formatJson=true" \
--name tron \
trontools/quickstart
More details about Tron Quickstart on GitHub
First off, in your javascript file, define TronWeb:
const TronWeb = require('tronweb')
When you instantiate TronWeb you can define
you can also set a
which works as a jolly. If you do so, though, the more precise specification has priority. Supposing you are using a server which provides everything, like TronGrid, you can instantiate TronWeb as:
const tronWeb = new TronWeb({
fullHost: 'https://api.trongrid.io',
headers: { "TRON-PRO-API-KEY": 'your api key' },
privateKey: 'your private key'
})
For retro-compatibility, though, you can continue to use the old approach, where any parameter is passed separately:
const tronWeb = new TronWeb(fullNode, solidityNode, eventServer, privateKey)
tronWeb.setHeader({ "TRON-PRO-API-KEY": 'your api key' });
If you are, for example, using a server as full and solidity node, and another server for the events, you can set it as:
const tronWeb = new TronWeb({
fullHost: 'https://api.trongrid.io',
eventServer: 'https://api.someotherevent.io',
privateKey: 'your private key'
}
)
If you are using different servers for anything, you can do
const tronWeb = new TronWeb({
fullNode: 'https://some-node.tld',
solidityNode: 'https://some-other-node.tld',
eventServer: 'https://some-event-server.tld',
privateKey: 'your private key'
}
)
The better way to understand how to work with Tron is to clone the MetaCoin example and follow the instructions at https://github.com/Tronbox-boxes/metacoin-box
In order to contribute you can
npm inpm run buildnpm test:node3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
createToken method supports 0 in its precision3.1.0
elliptic to the latest version 6.5.3ethers to the latest version 5.0.8loadAbi()3.0.0
2.10.2
2.10.1
trx.listExchangesPaginated2.10.0
trx.getTokenListByName2.9.0
2.8.1
keepTxID to show also the txID when triggering a contract with shouldPollResponse2.8.0
2.7.4
2.7.3
2.6.8
2.6.3
2.6.0
2.5.6
2.5.5
receiverAddress during freezeBalance and unfreezeBalance if it is equal to the owner address2.5.4
2.5.2
Trx.signString and `Trx.verifySignature2.5.0
2.3.7
2.3.6
/wallet/getapprovedlist and /wallet/getsignweight JavaTron API.2.3.5
#event.getEventsByContractAddress naming.2.3.4
#plugin.register to pass parameters to pluginInterface.2.3.3
2.3.2
2.3.1
2.3.0
fullNode, solidityNode and eventServer as separate params_watch which causes a continuous update of the since parameterTronWeb is distributed under a MIT licence.
For more historic data, check the original repo at https://github.com/tronprotocol/tron-web
FAQs
JavaScript SDK that encapsulates the TRON HTTP API
We found that bce-web demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.