
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
solinkify-sdk
Advanced tools
Solinkify is a decentralized payment infrastructure on the Solana network designed to bridge digital assets with Merchants (E-commerce) and Autonomous AI Agents (M2M).
This project combines Anchor Smart Contracts, a Rust (Axum) backend for off-chain scalability, and a plug-and-play JavaScript SDK.
Use NPM or Yarn to integrate Solinkify into your project:
npm install solinkify-sdk
Merchants can accept Solana payments without worrying about the complexities of building Web3 transactions.
Suitable for basic HTML or simple backend systems.
import { SolinkifyMerchant } from 'solinkify-sdk';
const merchant = new SolinkifyMerchant();
async function handlePayment() {
// 1. Get a ready-to-use transaction from Solinkify
const tx = await merchant.createPaymentTransaction(
"YOUR_STORE_WALLET",
"BUYER_WALLET",
0.1, // Amount in SOL
"ORDER-12345" // Order ID
);
// 2. Request buyer's wallet approval (Phantom, etc.)
const provider = window.phantom?.solana;
const { signature } = await provider.signAndSendTransaction(tx);
console.log("Payment Successful! TxID:", signature);
}
Direct integration into the checkout button in your modern frontend.
import { useWallet } from '@solana/wallet-adapter-react';
import { Connection } from '@solana/web3.js';
import { SolinkifyMerchant } from 'solinkify-sdk';
export default function CheckoutButton() {
const { publicKey, sendTransaction } = useWallet();
// Set to Devnet for the testing/development phase
const connection = new Connection("[https://api.devnet.solana.com](https://api.devnet.solana.com)");
const handleCheckout = async () => {
if (!publicKey) return alert("Please connect your wallet first!");
try {
const merchantApi = new SolinkifyMerchant();
// 1. Generate transaction from the Solinkify SDK
const tx = await merchantApi.createPaymentTransaction(
"YOUR_STORE_WALLET",
publicKey.toBase58(),
0.1,
"INV-REACT-001"
);
// 2. Execute transaction via the DApp's built-in Wallet Adapter
const signature = await sendTransaction(tx, connection);
alert(`Payment Successful! TxID: ${signature}`);
} catch (error) {
console.error("Payment failed:", error);
}
};
return (
<button
onClick={handleCheckout}
style={{ background: '#9945FF', color: 'white', padding: '10px 20px', borderRadius: '8px', cursor: 'pointer' }}
>
Pay 0.1 SOL (Devnet) via Phantom
</button>
);
}
Solinkify's x402 Protocol enables AI to purchase data or APIs autonomously without human intervention. The SDK handles HTTP 402 Payment Required negotiation, blockchain payments, and cryptographic verification behind the scenes.
import { SolinkifyAgent } from 'solinkify-sdk';
// Initialize with AI Private Key (Base58)
const agent = new SolinkifyAgent("YOUR_AI_PRIVATE_KEY_BASE58");
async function buyDigitalAsset() {
try {
// Automated: Get Invoice -> Pay On-Chain -> Cryptographic Sign -> Download URL
const downloadUrl = await agent.purchaseAndDownload("DIGITAL_ASSET_ID");
console.log("✅ Asset successfully purchased. Download link:", downloadUrl);
} catch (error) {
console.error("❌ Failed to purchase asset:", error.message);
}
}
AaKvuhidmnrpXdHi762sJ1xZ5TrjragS9Y6ikwFVp1trBase URL: https://api.solinkify.com/
| Endpoint | Method | Description |
|---|---|---|
/gateway/create-payment | POST | Creates an unsigned M2M transaction with fee-splitting instructions for the Merchant. |
/x402/book/:id | GET | Requests an invoice or downloads the asset (Requires 3 Security Headers). |
/actions/buy/:id | GET/POST | Native endpoint for the Solana Blinks standard. |
/books | GET | Fetches the list of digital assets that are live in the database. |
If you are not using the SolinkifyAgent module and are making API calls manually, you must include these 3 headers in the second GET request (after the on-chain payment is complete) to claim the file:
x-payment-signature: The TxID (Signature) of your SOL transfer proof on the Solana network.x-buyer-pubkey: The Public Key of the wallet used for the payment.x-auth-signature: A cryptographic signature (Ed25519) of a message containing the string ${book_id}:${signature} using the buyer's private key.Distributed under the ISC License.
Solinkify - Empowering the Machine-to-Machine Economy on Solana. Website | API Dashboard
FAQs
Official SDK for Solinkify M2M & Merchant Gateway
The npm package solinkify-sdk receives a total of 0 weekly downloads. As such, solinkify-sdk popularity was classified as not popular.
We found that solinkify-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.