
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
This library is still under development and not ready for production use.
A complete, compact and simple library for Quai and Qi, written in TypeScript.
Features
Versions
For advisories and important notices, follow @quainetwork on Twitter as well as watch this GitHub project.
For more general news, discussions, and feedback, join the Quai Developer Discord.
NodeJS
/home/some_project> npm install quais
Browser (ESM)
The bundled library is available in the ./dist/ folder in this repo.
<script type="module">
import { quais } from "./dist/quais.min.js";
</script>
For developers looking to contribute to quais or integrate it into their projects with local modifications, setting up a local development environment is essential. This section guides you through the process of building quais and linking it to another project on your machine using npm link.
Prepare quais for Symbolic Linking
Clone the quais repository and navigate into it.
git clone https://github.com/dominant-strategies/quais.js.git
cd quais.js
Install dependencies.
npm install
Create a global symbolic link for quais. This makes the quais package available to link in any other project. Whenever a local change is made to quais that you want to test in another project, you must run this command again to update the symbolic link.
npm run update-symlink
Caution - The update-symlink command updates the globally available symbolic link to the build of the current branch you are on when the command is run. This can potentially lead to incompatible version usage if quais is linked to multiple projects locally.
Linking quais to Another Project
After setting up quais for local development, you can link it to another project to test changes or develop features that depend on quais.
cd path/to/your/project
npm link quais
Testing Changes
With quais linked to your project, any changes made to the quais library can be immediately tested within the context of your project. Remember to rebuild quais (npm run update-symlink) after making changes to ensure they are reflected in your project.
Reverting to the Published Package
If you need to revert back to the official quais package published on npm, you can unlink quais and reinstall the package.
Unlink quais by removing the symlink.
npm unlink quais
Reinstall quais: Install the quais package from npm to use the published version.
npm install quais
Documentation for the Quais SDK is under heavy development and will be updated often soon. In the meantime, please refer to the reference material below:
The quais package only includes the most common and most core
functionality to interact with Quai Network. There are many other
packages designed to further enhance the functionality and experience.
call to reduce latency and backend request capacityUse ./deterministic-build.sh to deterministically build the quais.js library using Docker. The hash returned from the script can be compared across different machines to ensure the code is the same and the built library will be in ./deterministic-build-output/dist/.
MIT License (including all dependencies).
FAQs
A complete and compact Quai library, for dapps, wallets and any other tools.
The npm package quais receives a total of 13,703 weekly downloads. As such, quais popularity was classified as popular.
We found that quais demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.