Installations
npm install eth-block-tracker-es5
Developer
kumavis
Developer Guide
Module System
CommonJS
Min. Node Version
Typescript Support
No
Node Version
9.11.1
NPM Version
5.6.0
Statistics
131 Stars
295 Commits
81 Forks
50 Watching
9 Branches
277 Contributors
Updated on 25 Nov 2024
Languages
TypeScript (99.42%)
JavaScript (0.58%)
Total Downloads
Cumulative downloads
Total Downloads
97,876
Last day
-26.7%
66
Compared to previous day
Last week
-9.9%
401
Compared to previous week
Last month
7.9%
2,044
Compared to previous month
Last year
35.4%
18,991
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
@metamask/eth-block-tracker
This module walks the Ethereum blockchain, keeping track of the latest block. It uses a web3 provider as a data source and will continuously poll for the next block.
Installation
yarn add @metamask/eth-block-tracker
or
npm install @metamask/eth-block-tracker
Usage
1const createInfuraProvider = require('@metamask/eth-json-rpc-infura'); 2const { PollingBlockTracker } = require('@metamask/eth-block-tracker'); 3 4const provider = createInfuraProvider({ 5 network: 'mainnet', 6 projectId: process.env.INFURA_PROJECT_ID, 7}); 8const blockTracker = new PollingBlockTracker({ provider }); 9 10blockTracker.on('sync', ({ newBlock, oldBlock }) => { 11 if (oldBlock) { 12 console.log(`sync #${Number(oldBlock)} -> #${Number(newBlock)}`); 13 } else { 14 console.log(`first sync #${Number(newBlock)}`); 15 } 16});
API
Methods
new PollingBlockTracker({ provider, pollingInterval, retryTimeout, keepEventLoopActive, usePastBlocks })
- Creates a new block tracker with
provider
as a data source andpollingInterval
(ms) timeout between polling for the latest block. - If an error is encountered when fetching blocks, it will wait
retryTimeout
(ms) before attempting again. - If
keepEventLoopActive
isfalse
, in Node.js it will unref the polling timeout, allowing the process to exit during the polling interval. Defaults totrue
, meaning the process will be kept alive. - If
usePastBlocks
istrue
, block numbers less than the current block number can used and emitted. Defaults tofalse
, meaning that only block numbers greater than the current block number will be used and emitted.
getCurrentBlock()
Synchronously returns the current block. May be null
.
1console.log(blockTracker.getCurrentBlock());
async getLatestBlock()
Asynchronously returns the latest block. if not immediately available, it will fetch one.
async checkForLatestBlock()
Tells the block tracker to ask for a new block immediately, in addition to its normal polling interval. Useful if you received a hint of a new block (e.g. via tx.blockNumber
from getTransactionByHash
). Will resolve to the new latest block when done polling.
Events
latest
The latest
event is emitted for whenever a new latest block is detected. This may mean skipping blocks if there were two created since the last polling period.
1blockTracker.on('latest', (newBlock) => console.log(newBlock));
sync
The sync
event is emitted the same as "latest" but includes the previous block.
1blockTracker.on('sync', ({ newBlock, oldBlock }) => 2 console.log(newBlock, oldBlock), 3);
error
The error
event means an error occurred while polling for the latest block.
1blockTracker.on('error', (err) => console.error(err));
Contributing
Setup
- Install the current LTS version of Node.js
- If you are using nvm (recommended) running
nvm use
will automatically choose the right node version for you.
- If you are using nvm (recommended) running
- Install Yarn v1
- Run
yarn setup
to install dependencies and run any requried post-install scripts- Warning: Do not use the
yarn
/yarn install
command directly. Useyarn setup
instead. The normal install command will skip required post-install scripts, leaving your development environment in an invalid state.
- Warning: Do not use the
Testing and Linting
Run yarn test
to run the tests once. To run tests on file changes, run yarn test:watch
.
Run yarn lint
to run the linter, or run yarn lint:fix
to run the linter and fix any automatically fixable issues.
Release & Publishing
The project follows the same release process as the other libraries in the MetaMask organization. The GitHub Actions action-create-release-pr
and action-publish-release
are used to automate the release process; see those repositories for more information about how they work.
-
Choose a release version.
- The release version should be chosen according to SemVer. Analyze the changes to see whether they include any breaking changes, new features, or deprecations, then choose the appropriate SemVer version. See the SemVer specification for more information.
-
If this release is backporting changes onto a previous release, then ensure there is a major version branch for that version (e.g.
1.x
for av1
backport release).- The major version branch should be set to the most recent release with that major version. For example, when backporting a
v1.0.2
release, you'd want to ensure there was a1.x
branch that was set to thev1.0.1
tag.
- The major version branch should be set to the most recent release with that major version. For example, when backporting a
-
Trigger the
workflow_dispatch
event manually for theCreate Release Pull Request
action to create the release PR.- For a backport release, the base branch should be the major version branch that you ensured existed in step 2. For a normal release, the base branch should be the main branch for that repository (which should be the default value).
- This should trigger the
action-create-release-pr
workflow to create the release PR.
-
Update the changelog to move each change entry into the appropriate change category (See here for the full list of change categories, and the correct ordering), and edit them to be more easily understood by users of the package.
- Generally any changes that don't affect consumers of the package (e.g. lockfile changes or development environment changes) are omitted. Exceptions may be made for changes that might be of interest despite not having an effect upon the published package (e.g. major test improvements, security improvements, improved documentation, etc.).
- Try to explain each change in terms that users of the package would understand (e.g. avoid referencing internal variables/concepts).
- Consolidate related changes into one change entry if it makes it easier to explain.
- Run
yarn auto-changelog validate --rc
to check that the changelog is correctly formatted.
-
Review and QA the release.
- If changes are made to the base branch, the release branch will need to be updated with these changes and review/QA will need to restart again. As such, it's probably best to avoid merging other PRs into the base branch while review is underway.
-
Squash & Merge the release.
- This should trigger the
action-publish-release
workflow to tag the final release commit and publish the release on GitHub.
- This should trigger the
-
Publish the release on npm.
- Be very careful to use a clean local environment to publish the release, and follow exactly the same steps used during CI.
- Use
npm publish --dry-run
to examine the release contents to ensure the correct files are included. Compare to previous releases if necessary (e.g. usinghttps://unpkg.com/browse/[package name]@[package version]/
). - Once you are confident the release contents are correct, publish the release using
npm publish
.
No vulnerabilities found.
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/MetaMask/.github/SECURITY.md:1
- Info: Found linked content: github.com/MetaMask/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/MetaMask/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/MetaMask/.github/SECURITY.md:1
Reason
SAST tool is not run on all commits -- score normalized to 6
Details
- Warn: 20 commits out of 30 are checked with a SAST tool
Reason
4 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'main'
- Info: 'force pushes' disabled on branch 'main'
- Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'
- Info: 'stale review dismissal' is required to merge on branch 'main'
- Warn: required approving review count is 1 on branch 'main'
- Info: codeowner review is required on branch 'main'
- Warn: 'last push approval' is disabled on branch 'main'
- Info: status check found to merge onto on branch 'main'
- Info: PRs are required in order to make changes on branch 'main'
Reason
4 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 4
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/build-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-test.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/build-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release-pr.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/create-release-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release-pr.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/create-release-pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/create-release-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/publish-release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/publish-release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-code-scanner.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/MetaMask/eth-block-tracker/security-code-scanner.yml/main?enable=pin
- Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 3 third-party GitHubAction dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/create-release-pr.yml:21
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish-release.yml:10
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/security-code-scanner.yml:13
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/security-code-scanner.yml:14
- Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/security-code-scanner.yml:15
- Warn: no topLevel permission defined: .github/workflows/build-test.yml:1
- Warn: no topLevel permission defined: .github/workflows/create-release-pr.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/security-code-scanner.yml:1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
5.8
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn MoreOther packages similar to eth-block-tracker-es5
eth-block-tracker
A block tracker for the Ethereum blockchain. Keeps track of the latest block.
eth-json-rpc-filters
[json-rpc-engine](https://github.com/MetaMask/json-rpc-engine) middleware implementing ethereum filter methods. Backed by an [eth-block-tracker](https://github.com/MetaMask/eth-block-tracker) and web3 provider interface (`web3.currentProvider`).
@babel/plugin-transform-block-scoping
Compile ES2015 block scoping (const and let) to ES5
@metamask/eth-block-tracker
A block tracker for the Ethereum blockchain. Keeps track of the latest block.