
Security News
Open VSX Begins Implementing Pre-Publish Security Checks After Repeated Supply Chain Incidents
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

IPFS JavaScript implementation.
This repo contains the JavaScript implementation of the IPFS protocol, with feature parity to the Go implementation.
Consult the Roadmap for a complete state description of the project, or you can find in process updates in our Captain.log. A lot of components can be used currently, but it is a WIP, so beware of the Dragons.
This project is available through npm. To install:
$ npm install ipfs --save
To include this project programmatically:
var IPFS = require('ipfs')
var node = new IPFS()
In order to use js-ipfs as a CLI, you must install it with the global flag. Run the following (even if you have ipfs installed locally):
$ npm install ipfs --global
The CLI is available by using the command jsipfs in your terminal. This is aliased, instead of using ipfs, to make sure it does not conflict with the Go implementation.
The code published to npm that gets loaded on require is in fact a ES5 transpiled version with the right shims added. This means that you can require it and use with your favourite bundler without having to adjust the asset management process.
var ipfs = require('ipfs');
Loading this module in a browser (using a <script> tag) makes the Ipfs object available in the global namespace.
The last published version of the package become available for download from unpkg and thus you may use it as the source:
loading the minified version
<script src="https://unpkg.com/ipfs/dist/index.min.js"></script>
loading the human-readable (not minified) version
<script src="https://unpkg.com/ipfs/dist/index.js"></script>
Will come soon
A complete API definition will come, meanwhile, you can learn how to you use js-ipfs throught he standard interface at
┌───┐ ┌───────────────┐ ┌──────────────┐
│CLI│───▶│ HTTP API ├───▶│IPFS Core Impl│
└───┘ └───────────────┘ └──────────────┘
△ △ △
└──────────────└──────────┬─────────┘
│
┌─────┐
│Tests│
└─────┘
IPFS Core is divided into separate subsystems, each of them exist in their own repo/module. The dependencies between each subsystem is assured by injection at the IPFS Core level. IPFS Core exposes an API, defined by the IPFS API spec. libp2p is the networking layer used by IPFS, but out of scope in IPFS core, follow that project here
▶ ┌───────────────────────────────────────────────────────────────────────────────┐
│ IPFS Core │
│ └───────────────────────────────────────────────────────────────────────────────┘
│
│ │
│
│ ┌──────────────┬──────────────┼────────────┬─────────────────┐
│ │ │ │ │
│ │ │ │ │ │
▼ │ ▼ │ ▼
│ ┌──────────────────┐ │ ┌──────────────────┐ │ ┌──────────────────┐
│ │ │ │ │ │ │ │
│ │ Block Service │ │ │ DAG Service │ │ │ IPFS Repo │
│ │ │ │ │ │ │ │
│ └──────────────────┘ │ └──────────────────┘ │ └──────────────────┘
│ │ │ │
IPFS Core │ ▼ │ ┌────┴────┐ │
┌────────┐ │ ▼ ▼ │
│ │ Block │ │ ┌────────┐┌────────┐ │
└────────┘ │ │DAG Node││DAG Link│ │
│ │ └────────┘└────────┘ │
┌──────────────────┐ │ │ ┌──────────────────┐
│ │ │ │ │ │ │
│ Bitswap │◀────┤ ├──────▶│ Importer │
│ │ │ │ │ │ │
└──────────────────┘ │ │ └──────────────────┘
│ │ │ │
│ │ ┌────┴────┐
│ │ │ ▼ ▼
│ │ ┌────────┐┌────────┐
│ ┌──────────────────┐ │ │ │ layout ││chunker │
│ │ │ ┌────────────┘ └────────┘└────────┘
│ │ Files │◀────┘ │
│ │ │
│ └──────────────────┘ │
▶ │
▼
┌───────────────────────────────────────────────────────────────────────────────┐
│ │
│ │
│ │
│ libp2p │
│ │
│ │
└───────────────────────────────────────────────────────────────────────────────┘
IPFS Core is the entry point module for IPFS. It exposes an interface defined on IPFS Specs.
Block Service uses IPFS Repo (local storage) and Bitswap (network storage) to store and fetch blocks. A block is a serialized MerkleDAG node.
DAG Service offers some graph language semantics on top of the MerkleDAG, composed by DAG Nodes (which can have DAG Links). It uses the Block Service as its storage and discovery service.
IPFS Repo is storage driver of IPFS, follows the IPFS Repo Spec and supports the storage of different types of files.
Bitswap is the exchange protocol used by IPFS to 'trade' blocks with other IPFS nodes.
Files is the API that lets us work with IPFS objects (DAG Nodes) as if they were Unix Files.
Importer are a set of layouts (e.g. UnixFS) and chunkers (e.g: fixed-size, rabin, etc) that convert data to a MerkleDAG representation inside IPFS.
| Package | Version | Dependencies | DevDependencies |
|---|---|---|---|
ipfs | |||
ipfs-api | |||
ipfs-unixfs-engine | |||
ipfs-repo | |||
ipfs-unixfs | |||
ipfs-block-service | |||
ipfs-block | |||
peer-id | |||
peer-info | |||
ipfs-merkle-dag | |||
ipfs-multipart | |||
multiaddr | |||
multihashing | |||
multihashes | |||
mafmt |
In addition there is the libp2p module family that makes up the network layer, the full list can be found here
IPFS implementation in JavaScript is a work in progress. As such, there's a few things you can do right now to help out:
MIT.
FAQs
JavaScript implementation of the IPFS specification
The npm package ipfs receives a total of 1,452 weekly downloads. As such, ipfs popularity was classified as popular.
We found that ipfs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

Research
/Security News
Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.

Security News
Lodash 4.17.23 marks a security reset, with maintainers rebuilding governance and infrastructure to support long-term, sustainable maintenance.