
Security News
GitHub Actions Pricing Whiplash: Self-Hosted Actions Billing Change Postponed
GitHub postponed a new billing model for self-hosted Actions after developer pushback, but moved forward with hosted runner price cuts on January 1.
Parse Solidity Code into Spider Monkey API compliant AST
#UPDATE All changes have now been merged into solidity-parser (thanks to axic and tcoulter). I'll continue to maintain this repo until all reported issues have been fixed and once those changes are merged into solidity-parser, this repo's maintenance will be discontinued. (And solidity-parser shall be flawless by then ;) )
This is a (much more) refined version of solidity-parser. I've fixed a lot of bugs (see below) and added features as per solidity grammar spec (but obviously its not perfect a.t.m.). I plan to maintain it long-term =)
#List of bugs in solidity-parser (as of this writing)
No 'name' field in StructDeclaration - this means we never get to know the name of the struct from the StructDeclaration Node object. (I made a PR for this but no response even after 2 weeks :()
IsStatement malfunctioning - When using inheritance with Contract or Library, the syntax is:
contract Car is Vehicle, Engine {
//definition
}
Solidity parser doesn't parse the 'is' section properly. the is Array's first object is fine (vehicle), but subsequent element is just a comma, not another object for Engine.
Exponentiation operator (double asterisk) not being parsed by solidity parser
A statement like uint x = 2 days; doesn't get parsed. It gives error at start of 'days'. (though SP parses the other tokens: "2 wei / 2 szabo / 2 finny, etc.", "days" is a valid suffix too but doesn't have support.
Parse of var (x) = 100; failing because x is surrounded by brackets (which is legal in solidity).
All these bugs have been fixed in solparse! If you find a bug or a missing feature in this parser, please open up an issue :)
FAQs
PEG.js Solidity parser for Javascript
The npm package solparse receives a total of 1,199 weekly downloads. As such, solparse popularity was classified as popular.
We found that solparse demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub postponed a new billing model for self-hosted Actions after developer pushback, but moved forward with hosted runner price cuts on January 1.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.