npmpackage.info

@ethereumjs/mpt

Monorepo for the Ethereum VM TypeScript Implementation

7.0.0-alpha.1

2,604

TypeScript

Installations

npm install @ethereumjs/mpt

Pull Requests

Open

48

Total

2,625

Closed

430

Merged

2,147

Issues

Open

89

Total

1,107

Closed

1,018

Releases

355

@ethereumjs/vm v8.1.1

@ethereumjs/vm@8.1.1

Published on 09 Sept 2024

@ethereumjs/evm v3.1.1

@ethereumjs/evm@3.1.1

Published on 09 Sept 2024

@ethereumjs/client v0.10.2

@ethereumjs/client@0.10.2

Published on 15 Aug 2024

@ethereumjs/vm@8.1.0

Published on 15 Aug 2024

@ethereumjs/evm v3.1.0

@ethereumjs/evm@3.1.0

Published on 15 Aug 2024

@ethereumjs/blockchain v7.3.0

@ethereumjs/blockchain@7.3.0

Published on 15 Aug 2024

View all 355 releases

Developer

ethereumjs

Developer Guide

BETA

Module System

ESM

Min. Node Version

>=18

Typescript Support

Yes

Node Version

20.12.2

NPM Version

10.5.0 Statistics

2,604 Stars

8,343 Commits

760 Forks

64 Watching

126 Branches

202 Contributors

Updated on 28 Nov 2024

Languages

TypeScript (97.66%)

JavaScript (1.56%)

Shell (0.49%)

HTML (0.22%)

Python (0.06%)

Solidity (0.01%)

Dockerfile (0.01%)

Total Downloads

Cumulative downloads

Total Downloads

290

Last day

Compared to previous day

Last week

211.1%

Compared to previous week

Last month

11.7%

153

Compared to previous month

Last year

290

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@ethereumjs/rlp @ethereumjs/util debug lru-cache ethereum-cryptography

Dev Dependencies

@ethereumjs/genesis @types/benchmark abstract-level level level-legacy level-mem levelup lmdb memory-level micro-bmark

Versions

EthereumJS Monorepo

This repository holds various protocol building blocks of the Ethereum blockchain execution layer and is managed by the Ethereum Foundation JavaScript team. There is a TypeScript implementation of the Ethereum Virtual Machine (EVM) ready to be used in Node.js or a browser environment, implementations of core structural blockchain building blocks like an Ethereum Tx, Block or Blockchain as well as a MPT (Merkle Patricia Tree) and devp2p (execution networking layer) implementation.

All libraries are bound together by the core Common library keeping track of chain specifics and hardfork changes. They are complemented by helper packages like RLP for data encoding/decoding or Util, providing helper functionalities like (byte) conversion, signatures, types and others.

Finally, the EthereumJS Execution Client (EthereumJS) has been in active development for some time now. It already serves a variety of purposes like testing, research (e.g. EIPs) and developer tooling to engage with the protocol.

Also to note: on the Ethereum Consensus side, the ChainSafe Lodestar repository complements this repository with an Ethereum Consensus Client implementation as well as various protocol implementations (like an SSZ library) developed in the context of Ethereum Consensus layer evolution.

Packages

Below you can find a list of the packages included in this repository.

package	npm	issues	tests	coverage
@ethereumjs/block
@ethereumjs/blockchain
@ethereumjs/client
@ethereumjs/common
@ethereumjs/devp2p
@ethereumjs/ethash
@ethereumjs/evm
@ethereumjs/genesis
@ethereumjs/rlp
@ethereumjs/statemanager
@ethereumjs/mpt
@ethereumjs/tx
@ethereumjs/util
@ethereumjs/verkle
@ethereumjs/vm
@ethereumjs/wallet

Branches

The following are our currently active branches:

Branch	Release Series	Status	Description
master	Upcoming (Autumn 2024)	`Develop`	Breaking release work
maintenance-v8	v7/v8	`Maintenance`	Maintenance for v8 releases (v7 also included)
maintenance-v6	v6	`Maintenance`	Maintenance for v6 releases

Breaking releases are mostly done in sync for all libraries (latest exceptions: VM v8, EVM v3), and release cycles are currently named after the @ethereumjs/vm version. In most cases PRs should be opened towards the current working branch. If there is no current working branch, please ask! 🙂

To inspect code related to a specific package version, refer to the tags.

Coverage report

Detailed version can be seen on Codecov.io

Package dependency relationship

1 graph TD
2   vm{vm}
3   client{client}
4   ethash --> blockchain
5   ethash --> client
6   devp2p --> client
7   block --> client
8   block --> blockchain
9   block --> ethash
10   block --> vm
11   blockchain --> client
12   mpt --> client
13   mpt --> vm
14   mpt --> blockchain
15   mpt --> block
16   mpt --> statemanager
17   util --> common
18   common --> block
19   common --> statemanager
20   common --> tx
21   common --> blockchain
22   common --> vm
23   common --> evm
24   common --> client
25   common --> devp2p
26   common --> genesis
27   evm --> vm
28   evm --> client
29   genesis --> client
30   genesis --> statemanager
31   genesis --> mpt
32   tx --> block
33   tx --> vm
34   tx --> client
35   vm --> client
36   rlp --> util
37   statemanager --> evm
38   statemanager --> vm
39   statemanager --> client

To update the diagram above edit the README file and open a new PR with the changes.

Getting Started

See our monorepo documentation to get started on setting up the repository and installing dependencies. The config folder gives an overview on shared configuration and scripts between packages.

EthereumJS

See our organizational documentation for an introduction to EthereumJS as well as information on current standards and best practices. If you want to join for work or carry out improvements on the libraries, please review our contribution guidelines first.

License

Most packages are MPL-2.0 licensed, see package folder for the respective license.

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/block-build.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/block-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/block-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/block-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/block-build.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/block-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/block-build.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/block-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/block-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/block-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/blockchain-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/blockchain-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/blockchain-build.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/blockchain-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/blockchain-build.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/blockchain-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/blockchain-build.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/blockchain-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/browser.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/browser.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/browser.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/browser.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-build.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-build.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-build.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-build.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-build.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-build.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-build.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/client-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/common-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/common-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/common-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/common-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/common-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/common-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/common-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/common-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cspell.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/cspell.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cspell.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/cspell.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devp2p-build.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/devp2p-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devp2p-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/devp2p-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devp2p-build.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/devp2p-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/devp2p-build.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/devp2p-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ethash-build.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/ethash-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ethash-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/ethash-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ethash-build.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/ethash-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ethash-build.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/ethash-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/evm-build.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/evm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/evm-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/evm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/evm-build.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/evm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/evm-build.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/evm-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/evm-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/evm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/examples.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/examples.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/examples.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/genesis-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/genesis-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/genesis-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/genesis-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/genesis-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/genesis-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/genesis-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/genesis-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lockfile.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/lockfile.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lockfile.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/lockfile.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lockfile.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/lockfile.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mpt-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/mpt-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mpt-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/mpt-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mpt-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/mpt-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/mpt-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/mpt-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-versions.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/node-versions.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-versions.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/node-versions.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rlp-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/rlp-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rlp-build.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/rlp-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rlp-build.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/rlp-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/rlp-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/rlp-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/statemanager-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/statemanager-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/statemanager-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/statemanager-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/statemanager-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/statemanager-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/statemanager-build.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/statemanager-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tx-build.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/tx-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tx-build.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/tx-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tx-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/tx-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tx-build.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/tx-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tx-build.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/tx-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typecheck.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/typecheck.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typecheck.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/typecheck.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typecheck.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/typecheck.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typecheck.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/typecheck.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/util-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/util-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/util-build.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/util-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/util-build.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/util-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/util-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/util-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verkle-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/verkle-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verkle-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/verkle-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verkle-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/verkle-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-build.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-build.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-build.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-nightly-test.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-nightly-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-nightly-test.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-nightly-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-nightly-test.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-nightly-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-nightly-test.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-nightly-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-nightly-test.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-nightly-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-nightly-test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-nightly-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-nightly-test.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-nightly-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-nightly-test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-nightly-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:269: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:282: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:308: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:312: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:319: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vm-pr.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/vm-pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wallet-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/wallet-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wallet-build.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/wallet-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wallet-build.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/wallet-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/wallet-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/ethereumjs/ethereumjs-monorepo/wallet-build.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1
Warn: containerImage not pinned by hash: Dockerfile:12: pin your Docker image by updating node:18-alpine to node:18-alpine@sha256:7e43a2d633d91e8655a6c0f45d2ed987aa4930f0792f6d9dd3bffc7496e44882
Warn: npmCommand not pinned by hash: Dockerfile:7
Warn: npmCommand not pinned by hash: Dockerfile:10
Warn: npmCommand not pinned by hash: scripts/e2e-publish.sh:20
Warn: npmCommand not pinned by hash: .github/workflows/lockfile.yml:31
Warn: npmCommand not pinned by hash: .github/workflows/vm-nightly-test.yml:31
Warn: npmCommand not pinned by hash: .github/workflows/vm-nightly-test.yml:54
Warn: npmCommand not pinned by hash: .github/workflows/vm-nightly-test.yml:76
Warn: npmCommand not pinned by hash: .github/workflows/vm-nightly-test.yml:99
Info: 0 out of 117 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 20 third-party GitHubAction dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 30 out of 38 npmCommand dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

License

Determines if the project has defined a license.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

5.6

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More