
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
tianwei-qa-tes
Advanced tools
The @mantleio/sdk package provides a set of tools for interacting with Mantle.
npm install @mantleio/sdk
You can find auto-generated API documentation over at sdk.mantle.xyz.
The CrossChainMessenger class simplifies the process of moving assets and data between Ethereum and Mantle.
You can use this class to, for example, initiate a withdrawal of ERC20 tokens from Mantle back to Ethereum, accurately track when the withdrawal is ready to be finalized on Ethereum, and execute the finalization transaction after the challenge period has elapsed.
The CrossChainMessenger can handle deposits and withdrawals of ETH and any ERC20-compatible token.
Detailed API descriptions can be found at sdk.mantle.xyz.
The CrossChainMessenger automatically connects to all relevant contracts so complex configuration is not necessary.
The Mantle SDK includes various utilities for handling Mantle's transaction fee model.
For instance, estimateTotalGasCost will estimate the total cost (in wei) to send at transaction on mantle including both the L2 execution cost and the L1 data cost.
You can also use the asL2Provider function to wrap an ethers Provider object into an L2Provider which will have all of these helper functions attached.
The SDK contains other useful helper functions and constants. For a complete list, refer to the auto-generated SDK documentation
FAQs
[Mantle] Tools for working with Mantle
We found that tianwei-qa-tes demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.