
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
mesh-security
Advanced tools
TS library with Cosmos SDK and Mesh Security smart contracts.
npm install mesh-security
First, make sure to create a provider for the chain you want to use. You can use the useChain
hook from cosmos-kit
or pass in address
and promises to return the query/signing clients:
import { ContractsProvider } from 'mesh-security';
import { useChain } from '@cosmos-kit/react';
const ChainContractProvider = ({ chainName, children }: { chainName: string, children: any }) => {
const { address, getCosmWasmClient, getSigningCosmWasmClient } = useChain(chainName);
return (
<ContractsProvider contractsConfig={{
address,
getCosmWasmClient,
getSigningCosmWasmClient
}}>
{children}
</ContractsProvider>
);
};
After you've created your provider, you can leverage the useContracts
hook:
import { useContracts } from 'mesh-security';
import { useChain } from '@cosmos-kit/react';
const ExampleComponent = ({chainName}:{chainName: string}) => {
const { converter, externalStaking, nativeStaking, simplePriceFeed } = useContracts();
const { address, status } = useChain(chainName);
let msg;
if (address && converter.cosmWasmClient) {
const composer = converter.getMessageComposer(converterAddr)
// do something with composer
console.log(composer);
// do something with a signing client from simplePriceFeed
const feed = simplePriceFeed.getSigningClient(feedAddr);
feed.updatePrice({
nativePerForeign: 'something...'
})
} else if (nativeStaking.cosmWasmClient) {
const query = nativeStaking.getQueryClient(nativeStakingAddr);
// do something with query client from nativeStaking
console.log(query);
}
return (
<div>
{address}
</div>
);
}
import { cosmos } from 'mesh-security';
const main = async () => {
const { createLCDClient } = cosmos.ClientFactory;
const client = await createLCDClient({ restEndpoint: REST_ENDPOINT });
// now you can query the modules
const balance = await client.cosmos.bank.v1beta1
.allBalances({ address: 'cosmos1addresshere' });
};
All contracts are scoped under the contracts
object:
import { contracts } from 'mesh-security';
const {
SG721Base,
VendingFactory,
VendingMinter,
Whitelist
} = contracts;
Then each contract will have clients, for example for Whitelist
:
const {
WhitelistClient,
WhitelistMessageComposer,
WhitelistQueryClient
} = Whitelist;
const queryClient = new WhitelistQueryClient(wasmClient, contractAddress);
const hasStarted = await queryClient.hasStarted()
const members = await queryClient.members({limit: 10})
const client = new WhitelistClient(signingWasmClient, sender, contractAddress);
await client.addMembers({
toAdd: ['name1', 'name2']
})
import { cosmwasm } from "mesh-security";
const {
clearAdmin,
executeContract,
instantiateContract,
migrateContract,
storeCode,
updateAdmin
} = cosmwasm.wasm.v1.MessageComposer.withTypeUrl;
import { ibc } from 'mesh-security';
const {
transfer
} = ibc.applications.transfer.v1.MessageComposer.withTypeUrl
import { cosmos } from 'mesh-security';
const {
fundCommunityPool,
setWithdrawAddress,
withdrawDelegatorReward,
withdrawValidatorCommission
} = cosmos.distribution.v1beta1.MessageComposer.fromPartial;
const {
multiSend,
send
} = cosmos.bank.v1beta1.MessageComposer.fromPartial;
const {
beginRedelegate,
createValidator,
delegate,
editValidator,
undelegate
} = cosmos.staking.v1beta1.MessageComposer.fromPartial;
const {
deposit,
submitProposal,
vote,
voteWeighted
} = cosmos.gov.v1beta1.MessageComposer.fromPartial;
⚡️ For web interfaces, we recommend using cosmos-kit. Continue below to see how to manually construct signers and clients.
Use getSigningPublicawesomeClient
to get your SigningStargateClient
, with the proto/amino messages full-loaded. No need to manually add amino types, just require and initialize the client:
import { getSigningPublicawesomeClient } from 'mesh-security';
const stargateClient = await getSigningPublicawesomeClient({
rpcEndpoint,
signer // OfflineSigner
});
To broadcast messages, you can create signers with a variety of options:
We recommend using cosmos-kit for creating signers that work with Keplr and other wallets.
Likely you'll want to use the Amino, so unless you need proto, you should use this one:
import { getOfflineSignerAmino as getOfflineSigner } from 'cosmjs-utils';
import { getOfflineSignerProto as getOfflineSigner } from 'cosmjs-utils';
WARNING: NOT RECOMMENDED TO USE PLAIN-TEXT MNEMONICS. Please take care of your security and use best practices such as AES encryption and/or methods from 12factor applications.
import { chains } from 'chain-registry';
const mnemonic =
'unfold client turtle either pilot stock floor glow toward bullet car science';
const chain = chains.find(({ chain_name }) => chain_name === 'stargaze');
const signer = await getOfflineSigner({
mnemonic,
chain
});
Now that you have your stargateClient
, you can broadcast messages:
const { send } = cosmos.bank.v1beta1.MessageComposer.withTypeUrl;
const msg = send({
amount: [
{
denom: 'ustars',
amount: '1000'
}
],
toAddress: address,
fromAddress: address
});
const fee: StdFee = {
amount: [
{
denom: 'ustars',
amount: '864'
}
],
gas: '86364'
};
const response = await stargateClient.signAndBroadcast(address, [msg], fee);
If you want to manually construct a stargate client
import { OfflineSigner, GeneratedType, Registry } from "@cosmjs/proto-signing";
import { AminoTypes, SigningStargateClient } from "@cosmjs/stargate";
import {
cosmosAminoConverters,
cosmosProtoRegistry,
cosmwasmAminoConverters,
cosmwasmProtoRegistry,
ibcProtoRegistry,
ibcAminoConverters,
publicawesomeAminoConverters,
publicawesomeProtoRegistry
} from 'stargazejs';
const signer: OfflineSigner = /* create your signer (see above) */
const rpcEndpint = 'https://rpc.cosmos.directory/stargaze'; // or another URL
const protoRegistry: ReadonlyArray<[string, GeneratedType]> = [
...cosmosProtoRegistry,
...publicawesomeProtoRegistry,
...cosmwasmProtoRegistry,
...ibcProtoRegistry
];
const aminoConverters = {
...cosmosAminoConverters,
...publicawesomeAminoConverters,
...cosmwasmAminoConverters,
...ibcAminoConverters
};
const registry = new Registry(protoRegistry);
const aminoTypes = new AminoTypes(aminoConverters);
const stargateClient = await SigningStargateClient.connectWithSigner(rpcEndpoint, signer, {
registry,
aminoTypes
});
🛠 Built by Cosmology — if you like our tools, please consider delegating to our validator ⚛️
Code built with the help of these related projects:
FAQs
Mesh Security
The npm package mesh-security receives a total of 0 weekly downloads. As such, mesh-security popularity was classified as not popular.
We found that mesh-security demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.