Installations
npm install @walletconnect/utils
Developer
walletconnect
Developer Guide
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
20.18.0
NPM Version
10.8.2
Statistics
1,470 Stars
6,020 Commits
716 Forks
72 Watching
126 Branches
151 Contributors
Updated on 27 Nov 2024
Languages
TypeScript (98.92%)
Kotlin (0.37%)
JavaScript (0.27%)
Ruby (0.16%)
Objective-C++ (0.15%)
Shell (0.08%)
Objective-C (0.03%)
Dockerfile (0.02%)
Total Downloads
Cumulative downloads
Total Downloads
63,269,923
Last day
4.7%
125,717
Compared to previous day
Last week
13.1%
689,293
Compared to previous week
Last month
7.2%
2,750,302
Compared to previous month
Last year
24.7%
28,008,966
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
20
Dev Dependencies
3
WalletConnect v2.x.x
Open protocol for connecting Wallets to Dapps - https://walletconnect.com
Setup
- Ensure nodejs and npm
- Clone the repository
- Install all package dependencies, by running
npm install
from the root folder
Running checks for all packages
To ensure all packages lint, build and test correctly, we can run the following command from the root folder:
For tests to pass in the following command, you will need your own
TEST_PROJECT_ID
value, which will be generated for you when you set up a new project on WalletConnect Cloud.
1TEST_PROJECT_ID=YOUR_PROJECT_ID npm run check
Command Overview
clean
- Removes build folders from all packageslint
- Runs eslint checksprettier
- Runs prettier checksbuild
- Builds all packagestest
- Tests all packagescheck
- Shorthand to run lint, build and test commandsreset
- Shorthand to run clean and check commands
Troubleshooting
- If you are experiencing issues with installation ensure you install
npm i -g node-gyp
- You will need to have xcode command line tools installed
- If there are issues with xcode command line tools try running
1sudo xcode-select --switch /Library/Developer/CommandLineTools 2sudo xcode-select --reset
License
Apache 2.0
No vulnerabilities found.
Reason
30 commit(s) out of 30 and 9 issue activity out of 30 found in the last 90 days -- score normalized to 10
Reason
all last 30 commits are reviewed through GitHub
Reason
no vulnerabilities detected
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: : LICENSE:1
Reason
no binaries found in the repo
Reason
update tool detected
Details
- Info: Dependabot detected
Reason
publishing workflow detected
Details
- Info: GitHub publishing workflow used in run https://api.github.com/repos/WalletConnect/walletconnect-monorepo/actions/runs/2860558881: .github/workflows/ci_sign_client.yml:16
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'v2.0'
- Info: 'allow deletion' disabled on branch 'v2.0'
- Info: status check found to merge onto on branch 'v2.0'
- Warn: number of required reviewers is only 1 on branch 'v2.0'
- Info: 'force pushes' disabled on branch 'v1.0'
- Info: 'allow deletion' disabled on branch 'v1.0'
- Info: status check found to merge onto on branch 'v1.0'
- Warn: number of required reviewers is only 1 on branch 'v1.0'
Reason
dependency not pinned by hash detected -- score normalized to 5
Details
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_sign_client.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/ci_sign_client.yml/v2.0?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_sign_client.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/ci_sign_client.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_sign_client.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/ci_sign_client.yml/v2.0?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_sign_client.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/ci_sign_client.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_sign_client.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/ci_sign_client.yml/v2.0?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_sign_client.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/ci_sign_client.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/intake.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/intake.yml/v2.0?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/intake.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/intake.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_checks.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_checks.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_checks.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_checks.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_checks.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_checks.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_checks.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_checks.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=pin
- Warn: containerImage not pinned by hash: packages/sign-client/Dockerfile:1: pin your Docker image by updating node:16.16-alpine to node:16.16-alpine@sha256:1c8769a8c9ed57817ef07162744a3722421333a438185c560aa42a9a1fc6ea23
- Warn: containerImage not pinned by hash: packages/sign-client/Dockerfile:8
- Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
- Info: no insecure (not pinned by hash) dependency downloads found in shell scripts
Reason
no badge detected
Reason
non read-only tokens detected in GitHub workflows
Details
- Warn: no topLevel permission defined: .github/workflows/ci_sign_client.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/ci_sign_client.yml/v2.0?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/intake.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/intake.yml/v2.0?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/pr_checks.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/WalletConnect/walletconnect-monorepo/pr_checks.yml/v2.0?enable=permissions
Reason
0 out of 5 artifacts are signed or have provenance
Details
- Warn: release artifact 1.7.8 does not have provenance: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/65324701
- Warn: release artifact 1.7.8 not signed: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/65324701
- Warn: release artifact 1.7.7 does not have provenance: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/62961892
- Warn: release artifact 1.7.7 not signed: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/62961892
- Warn: release artifact 1.7.6 does not have provenance: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/62932371
- Warn: release artifact 1.7.6 not signed: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/62932371
- Warn: release artifact 1.7.5 does not have provenance: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/61773171
- Warn: release artifact 1.7.5 not signed: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/61773171
- Warn: release artifact 1.7.4 does not have provenance: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/61128608
- Warn: release artifact 1.7.4 not signed: https://api.github.com/repos/WalletConnect/walletconnect-monorepo/releases/61128608
Reason
security policy file not detected
Reason
project is not fuzzed
Score
6.7
/10
Last Scanned on 2022-08-15
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More