Package Health Score

61 / 100

security
Security review needed
popularity
Limited
maintenance
Inactive
community
Active

Explore Similar Packages

Security

Security review needed

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version				Vulnerabilities	License Risk
21.1.1	\|	08/2020		0 C 0 H 0 M 0 L	0 H 0 M 0 L
21.0.0	\|	03/2020		0 C 0 H 0 M 0 L	0 H 0 M 0 L
18.3.1	\|	10/2019		0 C 0 H 0 M 0 L	0 H 0 M 0 L
19.3.0	\|	08/2019	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L
18.2.1	\|	01/2019		0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Limited

Weekly Downloads (296)

GitHub Stars: 952
Forks: 310
Contributors: 90

Direct Usage Popularity

The npm package blockstack receives a total of 296 downloads a week. As such, we scored blockstack popularity level to be Limited.

Based on project statistics from the GitHub repository for the npm package blockstack, we found that it has been starred 952 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active

Readme.md: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 90
Funding: No

With more than 10 contributors for the blockstack repository, this is possibly a sign for a growing and inviting community.

Embed Package Health Score Badge

Maintenance

Inactive

Commit Frequency

Open Issues: 45
Open PR: 4
Last Release: 4 years ago
Last Commit: 14 days ago

Further analysis of the maintenance status of blockstack based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for blockstack is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: >=8

Age: 9 years
Dependencies: 22 Direct
Versions: 143
Install Size: 12.2 MB
Dist-tags: 6
# of Files: 567
Maintainers: 3
TS Typings: No

blockstack has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Not sure how to use blockstack?

To help you get started, we've collected the most common ways that blockstack is being used within popular public projects.

blockstack / radiks / test / setup.js View on Github

beforeEach(async () => {
  const userSession = new UserSession({
    appConfig: new AppConfig(['store_write', 'publish_data']),
  });
  configure({
    userSession,
  });
  try {
    await collection.drop();
  } catch (error) {
    // collection doesn't exist
  }
  const appPrivateKey = makeECPrivateKey();
  const blockstackConfig = JSON.stringify({
    version: '1.0.0',
    userData: {
      appPrivateKey,
      username: faker.name.findName(),

View more ways to use blockstack

blockstack.js

Note: If you're looking for the Blockstack CLI repo it was merged with Blockstack Core.

Installation

$ npm install blockstack

About

Blockstack JS is a library for profiles/identity, authentication, and storage.

The authentication portion of this library can be used to:

create an authentication request
create an authentication response

The profiles/identity portion of this library can be used to:

transform a JSON profile into cryptographically-signed tokens
recover a JSON profile from signed tokens
validate signed profile tokens

The storage portion of this library can be used to:

store and retrieve your app's data in storage that is controlled by the user

Note: this document uses ES6 in its examples but it is compiled down to Javascript (ES5) and is perfectly compatible with it. If you're using the latter, just make a few adjustments to the examples below (e.g. use "let" instead of "var").

Documentation

Compatibility

Note: blockstack.js 0.14.0 and newer versions use a new on-disk format that is not backward compatible with prior versions.

Contributing

This repository uses the git flow branching mode.

The latest released code as deployed to npm is in master and the latest delivered development changes for the next release are in develop.

We use the git-flow-avh plugin.

Please send pull requests against develop. Pull requests should include tests, flow static type annotations and be lint free.

Github issues marked help-wanted are great places to start. Please ask in a github issue or slack before embarking on larger issues that aren't labeled as help wanted or adding additional functionality so that we can make sure your contribution can be included!

Maintainer

This repository is maintained by larry.id.

Testing

$ npm run test

We test on the "Active LTS" version of Node.

Testing in a browser

This test will only work with your browser's Cross-Origin Restrictions disabled.

Run npm run compile; npm run browserify before opening the file test.html in your browser.

Releasing

git flow release start
Add section to CHANGELOG.md
Increment version in package.json and commit
npm publish
Commit built documentation and distribution
git flow release finish

blockstack development dependencies

@babel/cli @babel/core @babel/plugin-proposal-class-properties @babel/plugin-proposal-object-rest-spread @babel/plugin-transform-runtime @babel/preset-env @babel/register @peculiar/webcrypto @types/jsdom @babel/preset-typescript @blockstack/prettier-config @types/cheerio @types/fetch-mock @types/form-data @types/node @types/proxyquire @types/sha.js @types/sinon @types/tape @types/triplesec @typescript-eslint/eslint-plugin @typescript-eslint/parser babel-loader babel-plugin-istanbul cheerio codecov cross-env eslint eslint-config-airbnb-base eslint-import-resolver-typescript eslint-plugin-import express fetch-mock jsdom eslint-config-prettier mock-local-storage npm-run-all nyc proxyquire rimraf semver sinon opn prettier shx source-map-loader source-map-support tape tape-promise triplesec ts-loader ts-node typedoc typescript webpack webpack-assets-manifest webpack-bundle-analyzer webpack-cli

FAQs

What is blockstack?

The Blockstack Javascript library for authentication, identity, and storage. Visit Snyk Advisor to see a full health score report for blockstack, including popularity, security, maintenance & community analysis.

Is blockstack popular?

The npm package blockstack receives a total of 296 weekly downloads. As such, blockstack popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is blockstack well maintained?

We found indications that blockstack is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is blockstack safe to use?

While scanning the latest version of blockstack, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 8 November-2024, at 12:58 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP