
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
hardhat-dependency-injector
Advanced tools
Copy compiled Solidity bytecode directly from NPM dependencies
Copy compiled Solidity bytecode directly from the NPM dependencies.
Based on the Hardhat Dependency Compiler by Nick Barry
Some Solidity npm packages provide already compiled smart contracts; some of these packages don't provide Solidity sources (for example Uniswap smart contracts); in many cases sources are not required, compiled versions are enough (for example in tests); in some cases already compiled contracts are required (for example when deploying Uniswap v2 infrastructure for testing purposes the exact match of the bytecode is required, which is possible to achieve only when using already compiled contracts)
npm install --save-dev hardhat-dependency-injector
# or
yarn add --dev hardhat-dependency-injector
Load plugin in the Hardhat config:
require("hardhat-dependency-injector");
Add configuration under the dependencyInjector key:
| option | description | default |
|---|---|---|
paths | Array of compiled dependency paths to copy | [] |
dependencyInjector: {
paths: [
"@uniswap/v3-core/artifacts/contracts",
"@uniswap/v3-periphery/artifacts/contracts",
],
}
Please see the Contribution Guide document to get understanding on how to report issues, contribute to the source code, fix bugs, introduce new features, etc.
(c) 2023 Basil Gorin (c) 2024–2025 Lazy So[u]l
FAQs
Copy compiled Solidity bytecode directly from NPM dependencies
The npm package hardhat-dependency-injector receives a total of 1 weekly downloads. As such, hardhat-dependency-injector popularity was classified as not popular.
We found that hardhat-dependency-injector demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.