Installations
npm install @dashevo/dashcore-libScore
64
Supply Chain
95.6
Quality
82.9
Maintenance
100
Vulnerability
96.1
License
Releases
Core library v0.22.0
Published on 16 Sept 2024
Core library v0.21.3
Published on 19 Jul 2024
Core library v0.21.2
Published on 05 Jul 2024
Core library v0.21.1
Published on 31 Jan 2024
Core library v0.21.0
Published on 30 Oct 2023
Core library v0.20.10
Published on 19 Oct 2023
Developer
dashevo
Developer Guide
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
18.20.4
NPM Version
10.7.0
Statistics
45 Stars
3,759 Commits
108 Forks
14 Watching
15 Branches
12 Contributors
Updated on 16 Sept 2024
Languages
JavaScript (99.85%)
HTML (0.09%)
TypeScript (0.06%)
Total Downloads
Cumulative downloads
Total Downloads
619,087
Last day
5.5%
1,857
Compared to previous day
Last week
45.6%
14,941
Compared to previous week
Last month
7.5%
44,684
Compared to previous month
Last year
137.8%
270,184
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
12
Dev Dependencies
32
Dashcore Library
A pure and powerful JavaScript Dash library.
Dash is a powerful new peer-to-peer platform for the next generation of financial technology. The decentralized nature of the Dash network allows for highly resilient Dash infrastructure, and the developer community needs reliable, open-source tools to implement Dash apps and services.
Table of Contents
Install
NodeJS
npm install @dashevo/dashcore-lib
Browser
CDN Standalone
1<script src="https://unpkg.com/@dashevo/dashcore-lib"></script> 2<script> 3 const { PrivateKey } = dashcore; 4 const privateKey = new PrivateKey(); 5 const address = privateKey.toAddress().toString(); 6 ... 7</script>
Building the Browser Bundle
To build a dashcore-lib full bundle for the browser:
1npm run build
This will generate a file named dashcore-lib.min.js in the dist/ folder.
Usage
Browser
<script src='./dist/dashcore-lib.min.js' type="text/javascript"></script>
<script>
const PrivateKey = dashcore.PrivateKey;
const privateKey = new PrivateKey();
const address = privateKey.toAddress().toString();
</script>
Modules
Some functionality is implemented as a module that can be installed separately:
- Payment Protocol Support
- Peer to Peer Networking
- Dash Core JSON-RPC
- Mnemonics
- Elliptical Curve Integrated Encryption Scheme
- Signed Messages
Development & Tests
1git clone https://github.com/dashevo/dashcore-lib 2cd dashcore-lib 3npm install
Run all the tests:
1npm test
You can also run just the Node.js tests with npm run test:node, just the browser tests with npm run test:browser or run a test coverage report with npm run coverage.
Documentation
Concepts
- Addresses
- Block
- Crypto
- Encoding
- Hierarchically-derived Private and Public Keys
- Mnemonic
- Networks
- PrivateKey
- PublicKey
- Script
- Transaction
- Using Different Units
- Unspent Output
- URI
- Governance Object / Proposal
How To Use
- Addresses
- Block
- BlockHeader
- Hierarchically-derived Private Key
- Hierarchically-derived Public Key
- Message
- Mnemonic
- Opcode
- PrivateKey
- PublicKey
- Script
- Transaction
- Transaction Input
- Transaction Output
- URI
Use Case Examples
Some examples can be found here, below is a list of direct links for some of them.
- Generate a random address
- Generate an address from a SHA256 hash
- Import an address via WIF
- Create a Transaction
- Sign a Dash message
- Verify a Dash message
- Create an OP RETURN transaction
- Create a 2-of-3 multisig P2SH address
- Spend from a 2-of-2 multisig P2SH address
Contributing
Please send pull requests for bug fixes, code optimization, and ideas for improvement. For more information on how to contribute, please refer to our CONTRIBUTING file.
License
Code released under the MIT license.
Copyright 2013-2017 BitPay, Inc. Bitcore is a trademark maintained by BitPay, Inc.
Copyright 2016-2017 The Dash Foundation, Inc.
Copyright 2017-2020 Dash Core Group, Inc.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 22/30 approved changesets -- score normalized to 7
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'master'
- Info: 'force pushes' disabled on branch 'master'
- Info: 'branch protection settings apply to administrators' is required to merge on branch 'master'
- Warn: 'stale review dismissal' is disabled on branch 'master'
- Warn: required approving review count is 1 on branch 'master'
- Warn: codeowners review is not required on branch 'master'
- Warn: 'last push approval' is disabled on branch 'master'
- Info: status check found to merge onto on branch 'master'
- Info: PRs are required in order to make changes on branch 'master'
Reason
dependency not pinned by hash detected -- score normalized to 4
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_and_release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/dashpay/dashcore-lib/test_and_release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_and_release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/dashpay/dashcore-lib/test_and_release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_and_release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/dashpay/dashcore-lib/test_and_release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_and_release.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/dashpay/dashcore-lib/test_and_release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_and_release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/dashpay/dashcore-lib/test_and_release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_and_release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/dashpay/dashcore-lib/test_and_release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_and_release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/dashpay/dashcore-lib/test_and_release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_and_release.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/dashpay/dashcore-lib/test_and_release.yml/master?enable=pin
- Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
- Info: 2 out of 2 npmCommand dependencies pinned
Reason
2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/test_and_release.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 22 are checked with a SAST tool
Reason
11 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
Score
3.9
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More