Foundry Lib Version Pinner

WHAT IT DOES

The Foundry Lib Version Pinner is a developer tool that helps pin versions of Foundry library dependencies. It takes user-provided library information (name, GitHub URL, current version), fetches the latest tags and commits from GitHub, and generates pinned version specifications for foundry.toml remappings. This helps developers lock dependencies to specific commits, ensuring reproducible builds and protecting against unexpected changes in upstream libraries.

HOW TO USE

Enter your library dependencies in the format name,repo_url,current_version (one per line). Click "fetch and pin versions" to query GitHub for available tags and commits. The tool fetches the latest tags for each repository, identifies if updates are available, and generates a list of remappings that pin each library to a specific commit hash. Results display a status table showing current and latest versions, and a ready-to-use remappings block for foundry.toml.

TECHNICAL MECHANISM

The tool parses user input to extract library name, repository URL, and current version. For each GitHub repository, it uses the GitHub REST API to fetch the list of tags (https://api.github.com/repos/owner/repo/tags). It filters tags for semantic version format (vX.Y.Z or X.Y.Z) and sorts them by version number (latest first). If no tags are found, it falls back to fetching the latest commits. The tool compares the latest tag with the user-provided current version to determine if an update is available. It generates a remapping string in the format "libname=commit-hash" that can be added to foundry.toml. The tool also displays the current status of each library with color-coded indicators.

WHAT IT CANNOT SEE

The tool cannot automatically update foundry.toml or remappings files. It cannot detect if a specific version is compatible with the current project. The tool cannot verify that the pinned version exists on the remote repository without API calls. It cannot handle private repositories without authentication. The tool cannot detect if the library has breaking changes between versions. It cannot determine if the pinned version is secure without manual review. The tool cannot analyze the impact of pinning a specific version on contract functionality.

PLEASE NOTE

This tool is designed for Ethereum Virtual Machine (EVM) compatible chains and Foundry-based projects. The tool only works with public GitHub repositories—private repos are not supported. The remappings generated are for reference—users must manually add them to foundry.toml. Always test the pinned version in a development environment before deploying to production. The tool provides estimates only and should be used as a starting point for dependency management. Different library versions may have different compatibility requirements.