
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A React SDK for querying and displaying universal profiles across platforms.
Install the package using npm:
npm install web3card
Or with yarn:
Import the Web3Card component in your React project and use it by passing an address prop:
import React from 'react';
import Web3Card from 'web3card';
function MyComponent() {
return (
<div>
<Web3Card address="vitalik.eth" />
{/* You can use any reference like .eth, .lens, .farcaster, or a blockchain address */}
</div>
);
}
web3card provides the following API functions to fetch profiles from different platforms:
fetchUniversalProfile(identity: string): This function fetches a universal profile using the provided identity (such as an Ethereum address, ENS name, etc.)
fetchENSProfile(identity: string): Fetches a profile associated with an Ethereum Name Service (ENS) identity
fetchLensProfile(identity: string): Retrieves a Lens profile using the provided identity
fetchFarcasterProfile(identity: string): Fetches a Farcaster profile with the provided identity
fetchDotBitProfile(identity: string): Retrieves a DotBit profile using the provided identity
Each function returns a Promise that resolves with the data of the fetched profile or null if an error occurs during the fetch operation. Errors during the fetch operation are logged to the console.
Here's how you might use the fetchENSProfile function:
import { fetchENSProfile } from 'web3card';
async function getProfile() {
const profile = await fetchENSProfile('vitalik.eth');
if (profile) {
console.log(profile);
} else {
console.error('Failed to fetch profile');
}
}
getProfile();
To start the development server:
npm run start
FAQs
A React SDK for querying and displaying universal profiles across platforms
The npm package web3card receives a total of 0 weekly downloads. As such, web3card popularity was classified as not popular.
We found that web3card demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.