Casper Wallet

Securely manage your CSPR tokens, interact with dapps and sign transactions with Casper Wallet, the Go-To self-custody wallet for the Casper blockchain.

---

Integrate Casper Wallet Into Your App

The recommended way of integrating Casper Wallet into your app is through CSPR.click, which provides a combined integration of major wallets in the Casper ecosystem, all at once, without the burden of maintaining multiple integrations at the same time. Please head over to the CSPR.click documentation to start.

Testing Casper Wallet integration on Casper Wallet Playground

Casper Wallet Playground is a React webapp created as a developer tool to help test integration with various features available in Casper Wallet.

Access Casper Wallet Playground repo

Open https://github.com/make-software/casper-wallet-playground

Clone this repository and run following commands from the repo root folder. NOTE: Node.js LTS is required.

npm install
npm run start

This will open webapp automatically in a new tab.

Load Wallet Extension in Chrome

1. Navigate chrome://extensions/ in Chrome browser
2. Enable Developer mode (right top corner, at least for Chrome 98)
3. Click on Load unpacked button (left top corner)
4. Pick build/chrome folder from builds.zip deliverable or builds folder when building from sources.

To open as a tab:

1. Open a new tab and use the link chrome-extension://{paste ID here}/popup.html

Load Wallet Extension in Firefox

1. Navigate about:debugging#/runtime/this-firefox in Firefox browser
2. Click on Load Temporary Add-on... button.
3. Pick build/firefox/manifest.json file from builds.zip deliverable or builds folder when building from sources.

To open as a tab:

1. Open new tab and fill the link moz-extension://{paste Internal UUID here}/popup.html

Load Wallet Extension in Safari

1. Open build/safari folder from builds.zip or builds folder when building from sources.
2. Double click on "Casper Wallet.app" file.
3. Follow instructions and enable Casper Wallet in opened Extensions Preferences window.
4. Open Safari and enable unsigned extensions. Extension should be available.

For more information please follow the link

Development setup

Working on any macOS or Linux machine with Node.js 22 and npm 10+ installed (see .nvmrc for the exact version). If you use nvm, run nvm use from the repo root to pick up the right version.

Install dependencies

Clone this repository and run the following command from the repo root folder.

npm run setup

npm lifecycle scripts are disabled by default (.npmrc sets ignore-scripts=true) as a supply-chain safeguard, so a plain npm install runs no dependency install scripts and does not set up the git hooks. npm run setup performs a full install: npm ci, then runs the approved install scripts via @lavamoat/allow-scripts, then installs the git hooks.

Approved dependency install scripts live in the lavamoat.allowScripts allowlist in package.json. To add a dependency that ships an install script, run npx allow-scripts auto, then review the diff and set the new entry to true only if the script is trusted and required — otherwise leave it false. CI fails on any install script that is not explicitly configured.

Grant script execution permissions for scripts folder

chmod +x scripts/*

Start watcher script to rebuild on changes (output folder)

Chrome:

npm run start:chrome

Firefox:

npm run start:firefox

Safari:

npm run start:safari

You can run all these commands in parallel.

Build deliverable from sources (build folder)

Chrome:

npm run build:chrome

Firefox:

npm run build:firefox

Safari:

npm run build:safari

All at once:

npm run build:all

Reproducible builds from the source package

npm run build:src produces build/casper-wallet-src#<sha>.zip, the package submitted alongside the extension for source review. Rebuilding it yields an artifact byte-identical to the published one — including manifest.json:

unzip casper-wallet-src#<sha>.zip -d casper-wallet-src
cd casper-wallet-src
npm ci
npm run build:firefox   # or build:chrome / build:safari

The package carries no .git, so the HASH=$(git rev-parse HEAD) in the build scripts resolves to nothing there. The commit stamped into manifest.version_name comes from build-hash.json, written into the package by npm run build:src. To build a tree that has neither — a downloaded tarball, for instance — pass the commit explicitly:

HASH=<full commit sha> npm run build:manifest:v2:firefox

A production build with no commit available anywhere fails rather than stamping a placeholder, since the resulting artifact could not be reproduced.

Unit tests

Unit tests are written with Jest and colocated with the source code.

npm test

To collect coverage (CI enforces a coverage gate):

npm run test:coverage

Code quality checks

Run the same checks as CI (Prettier, ESLint, TypeScript, knip and unit tests with coverage) with a single command:

npm run ci-check

The individual checks are also available as separate scripts: npm run format:check, npm run lint, npm run tsc, npm run knip.

To run the project's Semgrep static-analysis rules locally (requires the semgrep CLI):

npm run semgrep

E2E tests

Write tests into the e2e-tests folder. Each script below builds the extension first and then runs the Playwright suite.

In UI mode:

npm run e2e:chrome:ui:popup
npm run e2e:chrome:ui:onboarding

Headless:

npm run e2e:chrome:headless:popup
npm run e2e:chrome:headless:onboarding
npm run e2e:firefox:headless:smoke

Contributing & security

• Contributions are welcome — see CONTRIBUTING.md.
• To report a security vulnerability, please follow SECURITY.md — do not open a public issue.

License

Casper Wallet is licensed under the Apache License 2.0.