Open Source JavaScript Smart Contract Tools

A library for secure smart contract development. Build on a solid foundation of community-vetted code. OpenZeppelin Contracts uses semantic versioning to communicate backward compatibility of its API and storage layout. To keep your system secure, you should always use the installed code as-is, and neither copy-paste it from online sources nor modify it yourself. The library is designed so that only the contracts and functions you use are deployed, so you don't need to worry about it needlessly increasing gas costs. Reduce the risk of vulnerabilities in your applications by using standard, tested, community-reviewed code.

Decentralized human identity without sybils or bots. Built with Kleros and the Ethereum community. No servers or databases are used. Control your identity with any Ethereum wallet. Contribute to the success of UBI and Proof of Humanity by leveraging ETH. Keep ETH or DAI in our smart contract vaults and help burn UBI tokens using yield. Half the yield is used to buy UBI. UBI is then burned, reducing its supply. No biometrics or real names are required. Just a quick video that proves your humanity. Audit any profile without permission. Challenged profiles go to a Kleros court. UBI is a Universal Basic Income token that gets streamed using Ethereum to verified Proof of Humanity profiles. ETH or DAI is lended via Yearn Finance. Earn the cumulative interest.

Ethlint (Formerly Solium) analyzes your Solidity code for style & security issues and fixes them. Standardize Smart Contract practices across your organization. Integrate with your build system. Deploy with confidence! Solium does not strictly follow Solidity Style Guide. The practices it enforces by default are best practices for the community at large. If you’re using vim with syntastic, and prefer to use a locally installed version of Solium (rather than a global version), you can install syntastic local solium to automatically load the local version in packages that have installed their own. Solium does not strictly adhere to Solidity Style Guide. It aims to promote coding practices agreed upon by the community at large. You can specify rules or plugins to apply as command line options. If you specify one, it overrides its corresponding configuration in the soliumrc file.

Visualize Solidity control flow for smart contract security analysis. Generates a DOT graph that visualizes the function control flow of a Solidity contract and highlights potential security vulnerabilities. A nice example of piping contract source that is in your clipboard through solgraph, dot, and preview: (Use whatever image previewer is available on your system; Preview.app is available on Mac) You have to have graphviz installed (brew install graphviz) to render the DOT file as an image. Depending on your permissions, you may need to add the unsafe-perm flag.