Security News
PyPI Introduces Digital Attestations to Strengthen Python Package Security
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
A Software Development Kit for the hypercore-protocol
Hypercore-protocol and it's ecosystem consists of a bunch of low level building blocks for working with data in distributed applications. Although this modularity makes it easy to mix and match pieces, it adds complexity when it comes to actually building something.
The Hyper SDK combines the lower level pieces of the Hyper stack into high level APIs that you can use across platforms so that you can focus on your application rather than the gritty details of how it works.
Make sure you've set up Node.js.
npm install --save hyper-sdk
# or yarn
import * as SDK from "hyper-sdk"
const sdk = await SDK.create({
// Specify the "storage" you want
// Regular strings will be passed to `random-access-application` to store in your user directory
// On web this will use `random-access-web` to choose the best storage based on the browser
// You can specify an absolute or relative path `./example/` to choose where to store data
// You can specify `false` to not persist data at all and do everything in-memory
storage: 'hyper-sdk',
// This controls whether the SDK will automatically start swarming when loading a core via `get`
// Set this to false if you want to have more fine control over peer discovery
autoJoin: true,
// Specify options to pass to the Corestore constructor
// The storage will get derived from the `storage` parameter
// https://github.com/hypercore-protocol/corestore/
corestoreOpts: {},
// Specify options to pass to the hyperswarm constructor
// The keypair will get derived automatically from the corestore
// https://github.com/hyperswarm/hyperswarm
swarmOpts: {},
})
The public key used for identifying this peer in the hyperswarm network.
This is a 32 byte buffer which can be use in conjunction with sdk.joinPeer()
to connect two peers directly together.
The list of active connections to other peers, taken from hyperswarm.
The list of active peers.
Each peer has a publicKey
, and list of topics
You can find more docs in the hyperswarm repo.
List of active Hypercores.
You can listen on when a peer gets connected or disconnected with this event.
You can find more docs in the hyperswarm repo.
sdk.on('peer-add', (peerInfo) => {
console.log('Connected to', peerInfo.publicKey, 'on', peerInfo.topics)
})
sdk.on('peer-add', (peerInfo) => {
console.log('Disconnected from')
})
You can initialize a Hypercore instanceby passing in a key, a name to derive a key from, or a URL containing either a key or a DNS name.
You can also pass additional options for whether the hypercore should be replicated as sparse or not.
Unlike corestore, you may not initialize a hypercore from a null
key since everything must be derivable or loadable.
Unless autoJoin
is set to false
, the peer discovery will be automatically started for the core.
// Derive a key from a "name"
const core = await sdk.get('example name')
// Resolve DNS to a hypercore
const core = await sdk.get('hyper://example.mauve.moe')
// Buffer key, 32 bytes of 0's
const core = await sdk.get(b4a.alloc(32, 0))
// Hex key, equivalent to 32 bytes of zeros
const core = await sdk.get('hyper://0000000000000000000000000000000000000000000000000000000000000000')
// z32 encoded, equivalent to 32 bytes of zeros
const core = await sdk.get('hyper://yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy')
// Disable sparse mode in order to download everything from peers
const core = await sdk.get('example', {sparse: false})
// Don't auto-join the swarm for the core on init
const core = await sdk.get('example', {autoJoin: false})
You can manually resolve DNS addresses to hypercore keys on domains using the DNS Link spec with this method.
However, it's not mandatory to use DNS since sdk.get()
will automatically detect and perform resolutions of DNS for hyper://
URLs.
const key = await sdk.resolveDNSToKey('example.mauve.moe')
Get back a namespaced Corestore instance which can be passed to things like Hyperdrive.
Note that cores initialized with a namespaced corestore will not be auto-joined and you will need to call sdk.join(core.discoveryKey)
on said cores.
import Hypderdrive from "hyperdrive"
const drive = new Hyperdrive(sdk.namespace('example'))
// Wait for the drive to initiailize
await drive.ready()
// Manually trigger peer lookup for this drive
sdk.join(drive.publicKey)
You can manually trigger peer discovery of hypercores as well as stop peer discovery.
This can be done by using the discoveryKey
of a hypercore, or any 32 byte buffer.
As well, you can use string names for topics in order to discover peers based on a human readable string. When using string topics, they are converted to 32 byte buffers using the Hypercore Crypto namespace algorithm.
const core = await sdk.get('example', {autoJoin: false})
// Start finding peers without advertising
sdk.join(core.discoveryKey, {server: false})
// Listen on a human readable topic
sdk.join("cool cat videos")
sdk.leave(core.discoveryKey)
sdk.leave("cool cat videos")
const sdk1 = await SDK.create({persist: false})
const sdk2 = await SDK.create({persist: false})
sdk1.joinPeer(sdk2.publicKey)
This will gracefully close connections, remove advertisements from the DHT, and close any open file handles.
Make sure you invoke this to keep the network fast and to avoid data corruption!
FAQs
A Software Development Kit for the Hypercore-Protocol
We found that hyper-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.