ethPM Specification

The ethPM-Spec defines the JSON schema for an ethPM manifest. ethPM manifests are only valid if they are tightly packed, with alphabetically sorted keys, and no trailing whitespaces. Since ethPM relies heavily upon content-addressed URIs, it's crucial that ethPM manifests are properly formatted, since the smallest edit will completely change the content's hash and integrity.

The formal definition of the ethPM-Spec can be found at its documentation. Below is a brief overview of the different fields you can define in an ethPM manifest to capture the idea of your smart contract(s).

"name"

The name of your ethPM package. Must conform to regex: ^[a-z][-a-z0-9]{0,255}$

• Valid package names

  • wallet

  • token-20

  • dao-123

• Invalid package names

  • 1token

  • _mypackage

  • wallet.123

"version"

The version of your ethPM package. ethPM does not enforce a specific versioning scheme, but using semver is strongly encouraged.

• "1.0.0"

• "2.0.0b3"

• "09.07.2019"

"manifest" (required)

The ethPM version of your manifest.

• "ethpm/3"

"meta"

JSON object containing metadata for your package. Possible options include..

• "authors": ["Alice", "Bob"]

• "license": "MIT"

• "description": "My awesome package."

• "keywords": ["solidity", "ethPM", "wallet"]

• "links": {"documentation": "readthedocs.com", "repository": "github.com", "website": "wallet.com"}

"contractTypes"

A field containing all of the contract types defined in a manifest. A contract type is the fundamental unit of an ethPM package, and maps 1-to-1 every defined contract in Solidity (contract ContractName {}). Two contracts are of the same contract type if they have the same bytecode. For each contract type in "contractTypes" , packages have the option to include the following properties

• "contractName"

• "sourceId"

• "deploymentBytecode"

• "runtimeBytecode"

• "abi"

• "devdoc"

• "userdoc"

"compilers"

An array of compiler information objects, describing the various compilers, their versions and settings, that were used to generate contract assets found in this package.

"sources"

This field contains content-addressed URIs for smart contracts composing the contract types defined in a manifest. Sources can be included in a package as either the entire source contract, inlined as a single string or a content-addressed URI where the source contract can be found.

While the sources field must contain all smart contracts necessary to compile the defined contractTypes in the manifest, the sources field is not limited to just smart contracts, and can contain deployment scripts or other files that would be useful to interact with the package's smart contract idea.

"deployments"

This field contains the deployment data for instances of deployed contract types. This field can contain references to contract deployments on different blockchains. Blockchain URIs are used to distinguish between the different blockchain networks. For each deployment, the following fields are available.

• "contractType" (required)

• "address" (required)

• "transaction"

• "block"

• "runtimeBytecode"

• "compiler"

"buildDependencies"

Content-addressed URIs for any ethPM packages that a manifest depends upon.