@alephium/web3 2.0.10 → 3.0.0-test.1

package/package.json

@@ -1,31 +1,58 @@
 {
   "name": "@alephium/web3",
-  "version": "2.0.10",
+  "version": "3.0.0-test.1",
   "description": "A JS/TS library to interact with the Alephium platform",
   "license": "GPL",
-  "main": "dist/src/index.js",
-  "browser": "dist/alephium-web3.min.js",
-  "types": "dist/src/index.d.ts",
+  "type": "commonjs",
+  "sideEffects": false,
+  "main": "dist/_cjs/index.js",
+  "module": "dist/_esm/index.js",
+  "types": "dist/_cjs/index.d.ts",
   "exports": {
-    "node": {
-      "types": "./dist/src/index.d.ts",
-      "default": "./dist/src/index.js"
+    ".": {
+      "import": {
+        "types": "./dist/_esm/index.d.ts",
+        "default": "./dist/_esm/index.js"
+      },
+      "require": {
+        "types": "./dist/_cjs/index.d.ts",
+        "default": "./dist/_cjs/index.js"
+      }
+    },
+    "./api/explorer": {
+      "import": {
+        "types": "./dist/_esm/api/api-explorer.d.ts",
+        "default": "./dist/_esm/api/api-explorer.js"
+      },
+      "require": {
+        "types": "./dist/_cjs/api/api-explorer.d.ts",
+        "default": "./dist/_cjs/api/api-explorer.js"
+      }
     },
-    "default": {
-      "types": "./dist/src/index.d.ts",
-      "default": "./dist/alephium-web3.min.js"
+    "./api/node": {
+      "import": {
+        "types": "./dist/_esm/api/api-alephium.d.ts",
+        "default": "./dist/_esm/api/api-alephium.js"
+      },
+      "require": {
+        "types": "./dist/_cjs/api/api-alephium.d.ts",
+        "default": "./dist/_cjs/api/api-alephium.js"
+      }
     }
   },
   "typesVersions": {
     "*": {
-      "test": [
-        "dist/src/test/"
+      "api/explorer": [
+        "dist/_cjs/api/api-explorer.d.ts"
+      ],
+      "api/node": [
+        "dist/_cjs/api/api-alephium.d.ts"
       ]
     }
   },
   "repository": {
     "type": "git",
-    "url": "git@github.com:alephium/alephium-web3.git"
+    "url": "git+https://github.com/alephium/alephium-web3.git"
   },
   "homepage": "https://github.com/alephium/alephium-web3",
   "bugs": {
@@ -36,38 +63,31 @@
     "alephium_version": "4.2.5",
     "explorer_backend_version": "3.3.2"
   },
-  "type": "commonjs",
   "dependencies": {
+    "@noble/curves": "1.6.0",
+    "@noble/hashes": "1.6.1",
     "@noble/secp256k1": "1.7.1",
     "base-x": "4.0.0",
     "bignumber.js": "^9.1.1",
-    "blakejs": "1.2.1",
-    "bn.js": "5.2.1",
-    "cross-fetch": "^3.1.5",
-    "crypto-browserify": "^3.12.0",
-    "elliptic": "6.6.1",
-    "eventemitter3": "^4.0.7",
-    "path-browserify": "^1.0.1",
-    "stream-browserify": "^3.0.0"
+    "eventemitter3": "^4.0.7"
   },
   "devDependencies": {
+    "@arethetypeswrong/cli": "^0.18.2",
     "@babel/eslint-parser": "^7.21.3",
-    "@types/elliptic": "^6.4.18",
+    "@size-limit/esbuild": "^11.0.0",
+    "@size-limit/file": "^11.0.0",
     "@types/find-up": "^2.1.1",
     "@types/fs-extra": "^9.0.13",
     "@types/jest": "^27.5.2",
     "@types/mock-fs": "^4.13.1",
-    "@types/node": "^16.18.23",
+    "@types/node": "^20.0.0",
     "@types/rewire": "^2.5.28",
     "@typescript-eslint/eslint-plugin": "^5.57.0",
     "@typescript-eslint/parser": "^5.57.0",
-    "clean-webpack-plugin": "4.0.0",
     "eslint": "^8.37.0",
     "eslint-config-prettier": "^8.8.0",
-    "eslint-plugin-header": "^3.1.1",
     "eslint-plugin-prettier": "^4.2.1",
     "eslint-plugin-security": "1.6.0",
-    "html-webpack-plugin": "5.5.0",
     "jest": "^28.1.3",
     "jest-localstorage-mock": "^2.4.26",
     "jest-websocket-mock": "^2.4.0",
@@ -75,27 +95,31 @@
     "mock-socket": "^9.2.1",
     "prettier": "^2.8.7",
     "process": "^0.11.10",
+    "publint": "^0.3.18",
     "rewire": "^6.0.0",
     "shelljs": "^0.8.5",
+    "size-limit": "^11.0.0",
     "swagger-typescript-api": "12.0.3",
-    "terser-webpack-plugin": "^5.3.7",
     "ts-jest": "^28.0.8",
     "ts-node": "^10.9.1",
     "tslib": "^2.5.0",
-    "typescript": "^4.9.5",
-    "webpack": "^5.94.0",
-    "webpack-cli": "^4.10.0"
+    "typescript": "^5.9.3"
   },
   "engines": {
-    "node": ">=14.0.0",
+    "node": ">=20.0.0",
     "npm": ">=7.0.0"
   },
   "scripts": {
-    "build": "rm -rf dist/* && npx tsc --build . && webpack",
+    "clean": "rm -rf node_modules dist",
+    "build": "rm -rf dist && pnpm build:cjs && pnpm build:esm",
+    "build:cjs": "tsc --project tsconfig.build.json --module commonjs --moduleResolution node --outDir dist/_cjs --declaration --verbatimModuleSyntax false && printf '{\"type\":\"commonjs\"}' > dist/_cjs/package.json",
+    "build:esm": "tsc --project tsconfig.build.json --outDir dist/_esm --declaration && printf '{\"type\":\"module\",\"sideEffects\":false}' > dist/_esm/package.json",
+    "check": "publint && attw --pack --ignore-rules internal-resolution-error",
     "test": "jest -i --config ./jest-config.json",
     "update-schemas": "npm run update-schema:alephium && npm run update-schema:explorer",
     "update-schema:alephium": "npx swagger-typescript-api --disable-throw-on-error -t ./configs -o ./src/api -n api-alephium.ts -p https://raw.githubusercontent.com/alephium/alephium/v${npm_package_config_alephium_version}/api/src/main/resources/openapi.json",
     "update-schema:explorer": "npx swagger-typescript-api --disable-throw-on-error -t ./configs -o ./src/api -n api-explorer.ts -p https://raw.githubusercontent.com/alephium/explorer-backend/v${npm_package_config_explorer_backend_version}/app/src/main/resources/explorer-backend-openapi.json",
-    "check-versions": "node scripts/check-versions.js ${npm_package_config_alephium_version} ${npm_package_config_explorer_backend_version}"
+    "check-versions": "node scripts/check-versions.js ${npm_package_config_alephium_version} ${npm_package_config_explorer_backend_version}",
+    "size": "npx size-limit"
   }
 }

package/src/address/address.ts

@@ -16,10 +16,11 @@ You should have received a copy of the GNU Lesser General Public License
 along with the library. If not, see <http://www.gnu.org/licenses/>.
 */
 
-import { ec as EC, eddsa as EdDSA } from 'elliptic'
-import BN from 'bn.js'
+import * as secp from '@noble/secp256k1'
+import { p256 } from '@noble/curves/p256'
+import { ed25519 } from '@noble/curves/ed25519'
 import { TOTAL_NUMBER_OF_GROUPS } from '../constants'
-import blake from 'blakejs'
+import { blake2b } from '@noble/hashes/blake2b'
 import bs58, { base58ToBytes } from '../utils/bs58'
 import { binToHex, concatBytes, hexToBinUnsafe, isHexString, xorByte } from '../utils'
 import { KeyType } from '../signer'
@@ -31,9 +32,6 @@ import { TraceableError } from '../error'
 import { byteCodec } from '../codec/codec'
 import { PublicKeyLike, safePublicKeyLikeCodec } from '../codec/public-key-like-codec'
 
-const secp256k1 = new EC('secp256k1')
-const secp256r1 = new EC('p256')
-const ed25519 = new EdDSA('ed25519')
 const PublicKeyHashSize = 32
 
 export enum AddressType {
@@ -220,14 +218,14 @@ export function publicKeyFromPrivateKey(privateKey: string, _keyType?: KeyType):
   switch (keyType) {
     case 'default':
     case 'gl-secp256k1':
-      return secp256k1.keyFromPrivate(privateKey).getPublic(true, 'hex')
+      return binToHex(secp.getPublicKey(privateKey, true))
     case 'gl-secp256r1':
     case 'gl-webauthn':
-      return secp256r1.keyFromPrivate(privateKey).getPublic(true, 'hex')
+      return binToHex(p256.getPublicKey(hexToBinUnsafe(privateKey), true))
     case 'gl-ed25519':
-      return ed25519.keyFromSecret(privateKey).getPublic('hex')
+      return binToHex(ed25519.getPublicKey(hexToBinUnsafe(privateKey)))
     case 'bip340-schnorr':
-      return secp256k1.g.mul(new BN(privateKey, 16)).encode('hex', true).slice(2)
+      return secp.Point.fromPrivateKey(privateKey).toHex(true).slice(2)
   }
 }
 
@@ -254,7 +252,7 @@ export function addressFromPublicKey(publicKey: string, _keyType?: KeyType): str
 
   switch (keyType) {
     case 'default': {
-      const hash = blake.blake2b(hexToBinUnsafe(publicKey), undefined, 32)
+      const hash = blake2b(hexToBinUnsafe(publicKey), { dkLen: 32 })
       const bytes = new Uint8Array([AddressType.P2PKH, ...hash])
       return bs58.encode(bytes)
     }
@@ -268,7 +266,7 @@ export function addressFromPublicKey(publicKey: string, _keyType?: KeyType): str
 }
 
 export function addressFromScript(script: Uint8Array): string {
-  const scriptHash = blake.blake2b(script, undefined, 32)
+  const scriptHash = blake2b(script, { dkLen: 32 })
   return bs58.encode(new Uint8Array([AddressType.P2SH, ...scriptHash]))
 }
 
@@ -286,7 +284,7 @@ export function addressFromTokenId(tokenId: string): string {
 export function contractIdFromTx(txId: string, outputIndex: number): string {
   const txIdBin = hexToBinUnsafe(txId)
   const data = new Uint8Array([...txIdBin, outputIndex])
-  const hash = blake.blake2b(data, undefined, 32)
+  const hash = blake2b(data, { dkLen: 32 })
   return binToHex(hash)
 }
 
@@ -301,10 +299,7 @@ export function subContractId(parentContractId: string, pathInHex: string, group
     throw new Error(`Invalid path: ${pathInHex}, expected hex string`)
   }
   const data = concatBytes([hexToBinUnsafe(parentContractId), hexToBinUnsafe(pathInHex)])
-  const bytes = new Uint8Array([
-    ...blake.blake2b(blake.blake2b(data, undefined, 32), undefined, 32).slice(0, -1),
-    group
-  ])
+  const bytes = new Uint8Array([...blake2b(blake2b(data, { dkLen: 32 }), { dkLen: 32 }).slice(0, -1), group])
   return binToHex(bytes)
 }
 

package/src/api/api-alephium.ts

@@ -1566,8 +1566,7 @@ export interface WalletUnlock {
   mnemonicPassphrase?: string
 }
 
-import 'cross-fetch/polyfill'
-import { convertHttpResponse } from './utils'
+import { convertHttpResponse, stringify } from './utils'
 
 export type QueryParamsType = Record<string | number, any>
 export type ResponseFormat = keyof Omit<Body, 'body' | 'bodyUsed'>
@@ -1665,8 +1664,8 @@ export class HttpClient<SecurityDataType = unknown> {
 
   private contentFormatters: Record<ContentType, (input: any) => any> = {
     [ContentType.Json]: (input: any) =>
-      input !== null && (typeof input === 'object' || typeof input === 'string') ? JSON.stringify(input) : input,
-    [ContentType.Text]: (input: any) => (input !== null && typeof input !== 'string' ? JSON.stringify(input) : input),
+      input !== null && (typeof input === 'object' || typeof input === 'string') ? stringify(input) : input,
+    [ContentType.Text]: (input: any) => (input !== null && typeof input !== 'string' ? stringify(input) : input),
     [ContentType.FormData]: (input: any) =>
       Object.keys(input || {}).reduce((formData, key) => {
         const property = input[key]
@@ -1675,7 +1674,7 @@ export class HttpClient<SecurityDataType = unknown> {
           property instanceof Blob
             ? property
             : typeof property === 'object' && property !== null
-            ? JSON.stringify(property)
+            ? stringify(property)
             : `${property}`
         )
         return formData

package/src/api/api-explorer.ts

@@ -637,8 +637,7 @@ export enum Currencies {
   Cny = 'cny'
 }
 
-import 'cross-fetch/polyfill'
-import { convertHttpResponse } from './utils'
+import { convertHttpResponse, stringify } from './utils'
 
 export type QueryParamsType = Record<string | number, any>
 export type ResponseFormat = keyof Omit<Body, 'body' | 'bodyUsed'>
@@ -736,8 +735,8 @@ export class HttpClient<SecurityDataType = unknown> {
 
   private contentFormatters: Record<ContentType, (input: any) => any> = {
     [ContentType.Json]: (input: any) =>
-      input !== null && (typeof input === 'object' || typeof input === 'string') ? JSON.stringify(input) : input,
-    [ContentType.Text]: (input: any) => (input !== null && typeof input !== 'string' ? JSON.stringify(input) : input),
+      input !== null && (typeof input === 'object' || typeof input === 'string') ? stringify(input) : input,
+    [ContentType.Text]: (input: any) => (input !== null && typeof input !== 'string' ? stringify(input) : input),
     [ContentType.FormData]: (input: any) =>
       Object.keys(input || {}).reduce((formData, key) => {
         const property = input[key]
@@ -746,7 +745,7 @@ export class HttpClient<SecurityDataType = unknown> {
           property instanceof Blob
             ? property
             : typeof property === 'object' && property !== null
-            ? JSON.stringify(property)
+            ? stringify(property)
             : `${property}`
         )
         return formData

package/src/api/types.ts

@@ -22,6 +22,7 @@ import { isDebugModeEnabled } from '../debug'
 import { TraceableError } from '../error'
 import { assertType, base58ToBytes, binToHex, bs58, Eq, isBase58, isHexString } from '../utils'
 import * as node from './api-alephium'
+import { stringify } from './utils'
 
 export type Number256 = bigint | string
 export type Val = Number256 | boolean | string | Val[] | ValObject | Map<Val, Val>
@@ -209,12 +210,12 @@ async function call(args: ApiRequestArguments, handler: ApiRequestHandler): Prom
   const debugModeEnabled = isDebugModeEnabled()
   const { path, method, params } = args
   if (debugModeEnabled) {
-    console.log(`[REQUEST] ${path} ${method} ${JSON.stringify(params)}`)
+    console.log(`[REQUEST] ${path} ${method} ${stringify(params)}`)
   }
   try {
     const response = await handler(args)
     if (debugModeEnabled) {
-      console.log(`[RESPONSE] ${path} ${method} ${JSON.stringify(response)}`)
+      console.log(`[RESPONSE] ${path} ${method} ${stringify(response)}`)
     }
     return response
   } catch (error) {

package/src/api/utils.ts

@@ -16,7 +16,6 @@ You should have received a copy of the GNU Lesser General Public License
 along with the library. If not, see <http://www.gnu.org/licenses/>.
 */
 
-import 'cross-fetch/polyfill'
 import * as node from '../api/api-alephium'
 
 export function convertHttpResponse<T>(response: { status: number; data: T; error?: { detail: string } }): T {
@@ -51,3 +50,16 @@ export function isBalanceEqual(b0: node.Balance, b1: node.Balance): boolean {
     isTokenBalanceEqual(b0.lockedTokenBalances, b1.lockedTokenBalances)
   )
 }
+
+// Drop-in replacement for JSON.stringify that handles BigInt values
+// by converting them to strings. This avoids the need for a global
+// BigInt.prototype.toJSON monkey-patch, enabling "sideEffects": false.
+export const stringify: typeof JSON.stringify = (value: any, replacer?: any, space?: any) =>
+  JSON.stringify(
+    value,
+    (key: string, value_: any) => {
+      const value = typeof value_ === 'bigint' ? value_.toString() : value_
+      return typeof replacer === 'function' ? replacer(key, value) : value
+    },
+    space
+  )

package/src/block/index.ts

@@ -16,4 +16,5 @@ You should have received a copy of the GNU Lesser General Public License
 along with the library. If not, see <http://www.gnu.org/licenses/>.
 */
 
-export { ReorgCallback, BlockSubscribeOptions, BlockSubscription } from './block'
+export type { ReorgCallback, BlockSubscribeOptions } from './block'
+export { BlockSubscription } from './block'

package/src/codec/hash.ts

@@ -15,10 +15,10 @@ GNU Lesser General Public License for more details.
 You should have received a copy of the GNU Lesser General Public License
 along with the library. If not, see <http://www.gnu.org/licenses/>.
 */
-import blake from 'blakejs'
+import { blake2b } from '@noble/hashes/blake2b'
 
 export function blakeHash(raw: Uint8Array) {
-  return blake.blake2b(raw, undefined, 32)
+  return blake2b(raw, { dkLen: 32 })
 }
 
 export function djbIntHash(bytes: Uint8Array): number {

package/src/contract/contract.ts

@@ -16,7 +16,6 @@ You should have received a copy of the GNU Lesser General Public License
 along with the library. If not, see <http://www.gnu.org/licenses/>.
 */
 
-import { promises as fsPromises } from 'fs'
 import {
   fromApiNumber256,
   toApiNumber256,
@@ -34,7 +33,8 @@ import {
   decodeArrayType,
   fromApiPrimitiveVal,
   tryGetCallResult,
-  decodeTupleType
+  decodeTupleType,
+  stringify
 } from '../api'
 import {
   SignDeployContractTxParams,
@@ -71,7 +71,7 @@ import {
 import { getCurrentNodeProvider } from '../global'
 import { EventSubscribeOptions, EventSubscription, subscribeToEvents } from './events'
 import { MINIMAL_CONTRACT_DEPOSIT, ONE_ALPH, TOTAL_NUMBER_OF_GROUPS } from '../constants'
-import * as blake from 'blakejs'
+import { blake2b } from '@noble/hashes/blake2b'
 import { isContractDebugMessageEnabled } from '../debug'
 import {
   contract,
@@ -279,7 +279,7 @@ export class Contract extends Artifact {
       fieldLength: decodedDebugContract.fieldLength,
       methods: methods
     })
-    const codeHashForTesting = blake.blake2b(bytecodeForTesting, undefined, 32)
+    const codeHashForTesting = blake2b(bytecodeForTesting, { dkLen: 32 })
     this.bytecodeForTesting = binToHex(bytecodeForTesting)
     this.codeHashForTesting = binToHex(codeHashForTesting)
     return this.bytecodeForTesting
@@ -378,7 +378,8 @@ export class Contract extends Artifact {
     codeHashDebug: string,
     structs: Struct[] = []
   ): Promise<Contract> {
-    const content = await fsPromises.readFile(path)
+    const fs = await import('fs')
+    const content = await fs.promises.readFile(path)
     const artifact = JSON.parse(content.toString())
     return Contract.fromJson(artifact, bytecodeDebugPatch, codeHashDebug, structs)
   }
@@ -401,7 +402,7 @@ export class Contract extends Artifact {
     if (this.stdInterfaceId !== undefined) {
       object.stdInterfaceId = this.stdInterfaceId
     }
-    return JSON.stringify(object, null, 2)
+    return stringify(object, null, 2)
   }
 
   getInitialFieldsWithDefaultValues(): Fields {
@@ -779,7 +780,8 @@ export class Script extends Artifact {
   }
 
   static async fromArtifactFile(path: string, bytecodeDebugPatch: string, structs: Struct[] = []): Promise<Script> {
-    const content = await fsPromises.readFile(path)
+    const fs = await import('fs')
+    const content = await fs.promises.readFile(path)
     const artifact = JSON.parse(content.toString())
     return this.fromJson(artifact, bytecodeDebugPatch, structs)
   }
@@ -792,7 +794,7 @@ export class Script extends Artifact {
       fieldsSig: this.fieldsSig,
       functions: this.functions
     }
-    return JSON.stringify(object, null, 2)
+    return stringify(object, null, 2)
   }
 
   async txParamsForExecution<P extends Fields>(params: ExecuteScriptParams<P>): Promise<SignExecuteScriptTxParams> {
@@ -1087,7 +1089,7 @@ export interface DeployContractParams<P extends Fields = Fields> {
 }
 assertType<
   Eq<
-    Omit<DeployContractParams<undefined>, 'initialFields' | 'exposePrivateFunctions'>,
+    Omit<DeployContractParams<Fields>, 'initialFields' | 'exposePrivateFunctions'>,
     Omit<SignDeployContractTxParams, 'signerAddress' | 'signerKeyType' | 'bytecode'>
   >
 >
@@ -1418,7 +1420,7 @@ function genCodeForType(type: string, structs: Struct[]): { bytecode: string; co
     methods: [loadImmFieldByIndex, loadMutFieldByIndex, storeMutFieldByIndex, destroy]
   }
   const bytecode = contract.contractCodec.encodeContract(c)
-  const codeHash = blake.blake2b(bytecode, undefined, 32)
+  const codeHash = blake2b(bytecode, { dkLen: 32 })
   return { bytecode: binToHex(bytecode), codeHash: binToHex(codeHash) }
 }
 
@@ -1615,7 +1617,7 @@ export async function getDebugMessagesFromTx(txId: HexString, provider?: NodePro
             message: hexToString(e.fields[0].value as string)
           }
         } else {
-          throw new Error(`Invalid debug log: ${JSON.stringify(e.fields)}`)
+          throw new Error(`Invalid debug log: ${stringify(e.fields)}`)
         }
       })
   } else {
@@ -2285,7 +2287,7 @@ export const getContractIdFromUnsignedTx = async (
   const result = await nodeProvider.transactions.postTransactionsDecodeUnsignedTx({ unsignedTx })
   const outputIndex = result.unsignedTx.fixedOutputs.length
   const hex = result.unsignedTx.txId + outputIndex.toString(16).padStart(8, '0')
-  const hashHex = binToHex(blake.blake2b(hexToBinUnsafe(hex), undefined, 32))
+  const hashHex = binToHex(blake2b(hexToBinUnsafe(hex), { dkLen: 32 }))
   return hashHex.slice(0, 62) + result.fromGroup.toString(16).padStart(2, '0')
 }
 

package/src/exchange/index.ts

@@ -21,8 +21,6 @@ export {
   getSenderAddress,
   isALPHTransferTx,
   getALPHDepositInfo,
-  BaseDepositInfo,
-  TokenDepositInfo,
-  DepositInfo,
   getDepositInfo
 } from './exchange'
+export type { BaseDepositInfo, TokenDepositInfo, DepositInfo } from './exchange'

package/src/index.ts

@@ -16,10 +16,6 @@ You should have received a copy of the GNU Lesser General Public License
 along with the library. If not, see <http://www.gnu.org/licenses/>.
 */
 
-BigInt.prototype['toJSON'] = function () {
-  return this.toString()
-}
-
 export * from './api'
 export * from './contract'
 export * from './signer'

package/src/signer/signer.ts

@@ -16,11 +16,18 @@ You should have received a copy of the GNU Lesser General Public License
 along with the library. If not, see <http://www.gnu.org/licenses/>.
 */
 
-import { createHash } from 'crypto'
-import { ExplorerProvider, fromApiNumber256, fromApiTokens, NodeProvider, toApiNumber256, toApiTokens } from '../api'
+import {
+  ExplorerProvider,
+  fromApiNumber256,
+  fromApiTokens,
+  NodeProvider,
+  stringify,
+  toApiNumber256,
+  toApiTokens
+} from '../api'
 import { node } from '../api'
-import * as utils from '../utils'
-import blake from 'blakejs'
+import { blake2b } from '@noble/hashes/blake2b'
+import { sha256 } from '@noble/hashes/sha256'
 import {
   Account,
   Address,
@@ -48,6 +55,7 @@ import {
 } from './types'
 import { TransactionBuilder } from './tx-builder'
 import { addressFromPublicKey, groupOfAddress } from '../address'
+import { binToHex, verifySignature } from '../utils'
 
 export abstract class SignerProvider {
   abstract get nodeProvider(): NodeProvider | undefined
@@ -64,7 +72,7 @@ export abstract class SignerProvider {
     const derivedAddress = addressFromPublicKey(account.publicKey, account.keyType)
     const derivedGroup = groupOfAddress(derivedAddress)
     if (derivedAddress !== account.address || (isGroupedAccount(account) && derivedGroup !== account.group)) {
-      throw Error(`Invalid accounot data: ${JSON.stringify(account)}`)
+      throw Error(`Invalid accounot data: ${stringify(account)}`)
     }
   }
 
@@ -380,13 +388,11 @@ export function extendMessage(message: string): string {
 export function hashMessage(message: string, hasher: MessageHasher): string {
   switch (hasher) {
     case 'alephium':
-      return utils.binToHex(blake.blake2b(extendMessage(message), undefined, 32))
+      return binToHex(blake2b(new TextEncoder().encode(extendMessage(message)), { dkLen: 32 }))
     case 'sha256':
-      const sha256 = createHash('sha256')
-      sha256.update(new TextEncoder().encode(message))
-      return utils.binToHex(sha256.digest())
+      return binToHex(sha256(new TextEncoder().encode(message)))
     case 'blake2b':
-      return utils.binToHex(blake.blake2b(message, undefined, 32))
+      return binToHex(blake2b(new TextEncoder().encode(message), { dkLen: 32 }))
     case 'identity':
       return message
     default:
@@ -402,7 +408,7 @@ export function verifySignedMessage(
   keyType?: KeyType
 ): boolean {
   const messageHash = hashMessage(message, messageHasher)
-  return utils.verifySignature(messageHash, publicKey, signature, keyType)
+  return verifySignature(messageHash, publicKey, signature, keyType)
 }
 
 export function toApiDestination(data: Destination): node.Destination {

package/src/token/nft.ts

@@ -19,7 +19,6 @@ along with the library. If not, see <http://www.gnu.org/licenses/>.
 // JSON Schema for the NFT metadata, which is pointed to by the value
 // returned from the `getTokenUri` method of the NFT contract
 
-import 'cross-fetch/polyfill'
 import { NFTCollectionUriMetaData, NFTTokenUriMetaData } from '../api'
 import { TraceableError } from '../error'
 

package/src/utils/sign.ts

@@ -16,24 +16,22 @@ You should have received a copy of the GNU Lesser General Public License
 along with the library. If not, see <http://www.gnu.org/licenses/>.
 */
 
-import { ec as EC } from 'elliptic'
 import { binToHex, encodeSignature, hexToBinUnsafe, signatureDecode } from '../utils'
 import { KeyType } from '../signer'
-import * as necc from '@noble/secp256k1'
-import { createHash, createHmac } from 'crypto'
+import * as secp from '@noble/secp256k1'
+import { sha256 } from '@noble/hashes/sha256'
+import { hmac } from '@noble/hashes/hmac'
 
-const ec = new EC('secp256k1')
-
-necc.utils.sha256Sync = (...messages: Uint8Array[]): Uint8Array => {
-  const sha256 = createHash('sha256')
-  for (const message of messages) sha256.update(message)
-  return sha256.digest()
+secp.utils.sha256Sync = (...messages: Uint8Array[]): Uint8Array => {
+  const h = sha256.create()
+  for (const message of messages) h.update(message)
+  return h.digest()
 }
 
-necc.utils.hmacSha256Sync = (key: Uint8Array, ...messages: Uint8Array[]): Uint8Array => {
-  const hash = createHmac('sha256', key)
-  messages.forEach((m) => hash.update(m))
-  return Uint8Array.from(hash.digest())
+secp.utils.hmacSha256Sync = (key: Uint8Array, ...messages: Uint8Array[]): Uint8Array => {
+  const h = hmac.create(sha256, key)
+  for (const message of messages) h.update(message)
+  return h.digest()
 }
 
 function checkKeyType(keyType: KeyType) {
@@ -48,11 +46,11 @@ export function sign(hash: string, privateKey: string, _keyType?: KeyType): stri
   checkKeyType(keyType)
 
   if (keyType === 'default' || keyType === 'gl-secp256k1') {
-    const key = ec.keyFromPrivate(privateKey)
-    const signature = key.sign(hash)
-    return encodeSignature(signature)
+    const sig = secp.signSync(hexToBinUnsafe(hash), hexToBinUnsafe(privateKey), { der: false })
+    const signature = secp.Signature.fromCompact(sig)
+    return encodeSignature({ r: signature.r, s: signature.s })
   } else {
-    const signature = necc.schnorr.signSync(hexToBinUnsafe(hash), hexToBinUnsafe(privateKey))
+    const signature = secp.schnorr.signSync(hexToBinUnsafe(hash), hexToBinUnsafe(privateKey))
     return binToHex(signature)
   }
 }
@@ -63,10 +61,11 @@ export function verifySignature(hash: string, publicKey: string, signature: stri
 
   try {
     if (keyType === 'default' || keyType === 'gl-secp256k1') {
-      const key = ec.keyFromPublic(publicKey, 'hex')
-      return key.verify(hash, signatureDecode(ec, signature))
+      const decoded = signatureDecode(signature)
+      const sig = secp.Signature.fromCompact(decoded.r + decoded.s)
+      return secp.verify(sig, hexToBinUnsafe(hash), hexToBinUnsafe(publicKey))
     } else {
-      return necc.schnorr.verifySync(hexToBinUnsafe(signature), hexToBinUnsafe(hash), hexToBinUnsafe(publicKey))
+      return secp.schnorr.verifySync(hexToBinUnsafe(signature), hexToBinUnsafe(hash), hexToBinUnsafe(publicKey))
     }
   } catch (error) {
     return false