{"id":13596959,"url":"https://github.com/BlockchainCommons/spotbit","last_synced_at":"2025-04-10T00:31:32.800Z","repository":{"id":38430517,"uuid":"277624095","full_name":"BlockchainCommons/spotbit","owner":"BlockchainCommons","description":"Self-Sovereign cryptocurrency price discovery tool leveraging Tor.","archived":false,"fork":false,"pushed_at":"2023-08-30T12:33:12.000Z","size":5230,"stargazers_count":36,"open_issues_count":19,"forks_count":20,"subscribers_count":6,"default_branch":"master","last_synced_at":"2025-04-09T08:39:47.125Z","etag":null,"topics":["bitcoin","bitcoin-price","ccxt"],"latest_commit_sha":null,"homepage":"https://spotbit.info/docs","language":"CSS","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/BlockchainCommons.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":["BlockchainCommons","ChristopherA"],"custom":"https://btcpay.blockchaincommons.com"}},"created_at":"2020-07-06T18:54:55.000Z","updated_at":"2025-04-02T00:32:33.000Z","dependencies_parsed_at":"2025-04-09T08:43:21.675Z","dependency_job_id":null,"html_url":"https://github.com/BlockchainCommons/spotbit","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":"BlockchainCommons/secure-template","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/BlockchainCommons%2Fspotbit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/BlockchainCommons%2Fspotbit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/BlockchainCommons%2Fspotbit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/BlockchainCommons%2Fspotbit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/BlockchainCommons","download_url":"https://codeload.github.com/BlockchainCommons/spotbit/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248135218,"owners_count":21053642,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bitcoin","bitcoin-price","ccxt"],"created_at":"2024-08-01T17:00:15.880Z","updated_at":"2025-04-10T00:31:32.758Z","avatar_url":"https://github.com/BlockchainCommons.png","language":"CSS","readme":"# Blockchain Commons Spotbit\n\n### _by [Christian Murray](https://github.com/watersnake1) and [Christopher Allen](https://github.com/ChristopherA) with [Jo](https://github.com/jodobear)_\n* \u003cimg src=\"https://github.com/BlockchainCommons/Gordian/blob/master/Images/logos/gordian-icon.png\" width=16 valign=\"bottom\"\u003e ***part of the [gordian](https://github.com/BlockchainCommons/gordian/blob/master/README.md) technology family***\n* \u003cimg src=\"https://raw.githubusercontent.com/BlockchainCommons/torgap/master/images/logos/torgap.png\" width=30 valign=\"bottom\"\u003e ***uses [torgap](https://github.com/BlockchainCommons/torgap/blob/master/README.md) technology***\n![](images/logos/spotbit-screen.jpg)\n\nPrice feeds for Bitcoin can be a privacy hole when wallets, users, or automated tools access them without using Tor or a secure proxy. If a user's wallets or tools access a preconfigured price feed, the user is potentially vulnerable to [Sybil attacks](https://en.wikipedia.org/wiki/Sybil_attack). **Spotbit's** purpose is to allow users to access price feeds in a customisable way that preserves privacy and mitigate the reliance on a single source of data.\n\n**Spotbit** is a portable API for Bitcoin price data and candles. It can aggregate data from over 100 exchanges and serve them from a single URL or using Tor as an onion hidden service. It is configurable so that the user can decide which base currencies to use (USDT, USD, EUR etc), and which exchanges to use for price data.\n\nUsers may choose to run their own local **Spotbit** server, or to connect to a hosted **Spotbit** service.\n\n#### Why Use Spotbit?\n\n1. **Privacy.** Spotbit can work as a Tor hidden service.\n1. **Reliability.** Spotbit aggregrates information using the exchanges/sources you configure, making your pricing data more trustworthy.\n1. **Self-sovereignty.** Spotbit can run from your server. \n\n### Features\n\n- Fetch Bitcoin prices from a set of exchanges.(See the API documentation [here](https://spotbit.info/docs))\n- Produce a beancount report of the transactions associated with a Bitcoin descriptor.\n- Web front-end with price data visualisation.  \n\n## Additional Information\n\n* Spotbit depends on the [CCXT](https://github.com/ccxt/ccxt) which provides an abstraction for API access to cryptocurrency exchanges.\n\n### Test Server\nA spotbit instance is currently running at \u003chttp://r5sru63gzyrnaayaua2ydo32f4hf6vd33bq6qmtktx3wjoib2cwi2gqd.onion\u003e. This instance is on a dedicated Blockchain Commons server.\n\n### Related Projects\n\nSpotbit is intended for integration with the [Gordian system](https://github.com/BlockchainCommons/Gordian), which consists of Tor-gapped components such as [Gordian Wallet](https://github.com/BlockchainCommons/GordianWallet-iOS) and a [Gordian Server](https://github.com/BlockchainCommons/GordianServer-macOS) or other server installed by [Bitcoin Standup scripts](https://github.com/BlockchainCommons/Bitcoin-StandUp-Scripts).\n\n## Gordian Principles\n\nSpotbit is a microservice intended to help realise the [Gordian Principles](https://github.com/BlockchainCommons/Gordian#gordian-principles) underpinning Blockchain Commons' Gordian technology stack and the Gordian Architecture. These principles are:\n\n* **Independence.** Users can choose which applications to use within an open ecosystem.\n* **Privacy.** Airgaps provide data with strong protection, while torgaps do the same for networked interactions.\n* **Resilience.** The paritioned design minimizes Single Points of Compromise.\n* **Openness.** Airgaps and torgaps are connected via standard specifications such as URs, which allow anyone to add apps to the ecosystem.\n\nBlockchain Commons apps do not phone home and do not run ads. Some are available through various app stores; all are available in our code repositories for your usage.\n\n## Status - Late Alpha\n\nSpotbit is currently under active development and in the late alpha testing phase. It should not be used for production tasks until it has had further testing and auditing.\n\n## Roadmap\n\n- [ ] Beancount reporting improvements\n  - Ref. https://github.com/BlockchainCommons/spotbit/issues/61\n  - [ ] Spotbit should process transaction records as CSVs from:\n    - [ ] [Sparrow Wallet](https://www.sparrowwallet.com)\n    - [ ] [BTCPay](https://btcpayserver.org/) \n- [ ] Fee estimation API \n  - Ref. https://github.com/BlockchainCommons/Community/issues/22#issuecomment-1169442462)\n  - Spotbit should connect to an Esplora in order to obtain [fee estimates](https://github.com/Blockstream/esplora/blob/master/API.md#fee-estimates)\n- [ ] Connect via Tor-gap to Esplora/Core \n  - [ ] Add a configuration option that specifies Tor proxy URL and port .\n    - [ ] Test that Tor client is installed on the server.\n    - [ ] [Modify requests](https://docs.python-requests.org/en/latest/user/advanced/#proxies) to use a Tor proxy.\n- [ ] Front-end improvements\n  - Ref. https://github.com/BlockchainCommons/spotbit/issues/59\n  - The front-end should visualize useful data from the API and allow the user to query the API. \n  - Show the current configuration of the Spotbit instance.\n  - [ ] Migrate front-end to [current API](https://spotbit.info/docs).\n  - [ ] Show current prices from configured exchanges.\n  - [ ] Display relevant (to be determined by what is useful) data from existing API endpoints.\n- [ ] Improve releases and builds.\n  - [ ] [Make a script for releasing Debian Packages of Spotbit](https://github.com/BlockchainCommons/spotbit/issues/102)\n  - [ ] [Add a build script to create executables for release](https://github.com/BlockchainCommons/spotbit/issues/77)\n  - [ ] [Add and document dockerfile](https://github.com/BlockchainCommons/spotbit/issues/70)\n\n## Development setup\n\nRequirements\n\n+ Python3.10+\n+ Nodejs\n\nCreate a virtual environment\n```\npython -m venv env/\n```\n\nActivate virtual environment\n```\nsource env/bin/activate\n```\n\nInstall dependencies\n```\npython -m pip install -r requirements.txt\n```\n\nRun\n```\npython app.py\n```\n\n## Installation Instructions\n\nSpotbit includes a script called `installSpotbit.sh` which installs Spotbit and configures Tor on a Debian-based linux system. \n\n```console\n$ git clone https://github.com/BlockchainCommons/spotbit.git\n$ cd spotbit\n$ chmod +x installSpotbit.sh\n$ sudo -s source ./installSpotbit.sh \n```\n\nThe installer will: \n- Install and setup tor on your system, \n- Create a user named `spotbit` in a `spotbit` group that controls the hidden service directory location at `/var/lib/tor/spotbit`. \n- Copy Spotbit sourcecode to `/home/spotbit/source`\n    - The user should update the default `spotbit.config` with their desired configuration.\n- Create a `systemd` service unit file in `/etc/systemd/system`. \n- Set up a Tor hidden service for Spotbit. \n\n## Usage Instructions\n\nTo run the server, run `sudo systemctl start spotbit`. \n\nYou can check on a spotbit's status at any time by running `sudo systemctl status spotbit`, or take a look at the log file in `/home/spotbit/source/spotbit.log`. \n\nThe Spotbit API schema can be found by browsing to: \u003chttp://localhost:5000/docs\u003e\n\n## Origin, Authors, Copyright \u0026 Licenses\n\nUnless otherwise noted (either in this [/README.md](./README.md) or in the file's header comments) the contents of this repository are Copyright © 2020 by Blockchain Commons, LLC, and are [licensed](./LICENSE) under the [spdx:BSD-2-Clause Plus Patent License](https://spdx.org/licenses/BSD-2-Clause-Patent.html).\n\nIn most cases, the authors, copyright, and license for each file reside in header comments in the source code. When it does not, we have attempted to attribute it accurately in the table below.\n\nThis table below also establishes provenance (repository of origin, permalink, and commit id) for files included from repositories that are outside of this repo. Contributors to these files are listed in the commit history for each repository, first with changes found in the commit history of this repo, then in changes in the commit history of their repo of their origin.\n\n| File      | From                                                         | Commit                                                       | Authors \u0026 Copyright (c)                                | License                                                     |\n| --------- | ------------------------------------------------------------ | ------------------------------------------------------------ | ------------------------------------------------------ | ----------------------------------------------------------- |\n| exception-to-the-rule.c or exception-folder | [https://github.com/community/repo-name/PERMALINK](https://github.com/community/repo-name/PERMALINK) | [https://github.com/community/repo-name/commit/COMMITHASH]() | 2020 Exception Author  | [MIT](https://spdx.org/licenses/MIT)                        |\n\n### Dependencies\n\nTo use Spotbit you'll need to use the following tools:\n\n- Python3.8 or higher (some libraries don't work as needed on older versions of Python)\n- Pip\n- Flask\n- CCXT - ![CryptoCurrency eXchange Tools](https://github.com/ccxt/ccxt)\n\nAll of these Python libraries can be installed via pip and Python3.8 can be installed for you in the install script.\n\n### Motivation\nSpotbit aims to provide an easy option for aggregating exchange data that does not require the use of a third party data website like Coinmarketcap. These data can be used inside of other apps or for personal use / analysis. Acquiring data across many exchanges can be a pain because normally one would need write slightly different code in order to interact with each API. \n\n### Derived from…\nThis  Spotbit project is either derived from or was inspired by the need of Fully Noded 2 to display realtime price info in-app:\n\n- [FullyNoded 2](https://github.com/BlockchainCommons/FullyNoded-2) — The mobile app for managing a BTC node via Tor, by [Fonta1n3](https://github.com/Fonta1n3).\n\n## Financial Support\n\nSpotbit is a project of [Blockchain Commons](https://www.blockchaincommons.com/). We are proudly a \"not-for-profit\" social benefit corporation committed to open source \u0026 open development. Our work is funded entirely by donations and collaborative partnerships with people like you. Every contribution will be spent on building open tools, technologies, and techniques that sustain and advance blockchain and internet security infrastructure and promote an open web.\n\nTo financially support further development of Spotbit and other projects, please consider becoming a Patron of Blockchain Commons through ongoing monthly patronage as a [GitHub Sponsor](https://github.com/sponsors/BlockchainCommons). You can also support Blockchain Commons with bitcoins at our [BTCPay Server](https://btcpay.blockchaincommons.com/).\n\n## Contributing\n\nWe encourage public contributions through issues and pull requests! Please review [CONTRIBUTING.md](./CONTRIBUTING.md) for details on our development process. All contributions to this repository require a GPG signed [Contributor License Agreement](./CLA.md).\n\n### Discussions\n\nThe best place to talk about Blockchain Commons and its projects is in our GitHub Discussions areas.\n\n[**Gordian Developer Community**](https://github.com/BlockchainCommons/Gordian-Developer-Community/discussions). For standards and open-source developers who want to talk about interoperable wallet specifications, please use the Discussions area of the [Gordian Developer Community repo](https://github.com/BlockchainCommons/Gordian-Developer-Community/discussions). This is where you talk about Gordian specifications such as [Gordian Envelope](https://github.com/BlockchainCommons/Gordian/tree/master/Envelope#articles), [bc-shamir](https://github.com/BlockchainCommons/bc-shamir), [Sharded Secret Key Reconstruction](https://github.com/BlockchainCommons/bc-sskr), and [bc-ur](https://github.com/BlockchainCommons/bc-ur) as well as the larger [Gordian Architecture](https://github.com/BlockchainCommons/Gordian/blob/master/Docs/Overview-Architecture.md), its [Principles](https://github.com/BlockchainCommons/Gordian#gordian-principles) of independence, privacy, resilience, and openness, and its macro-architectural ideas such as functional partition (including airgapping, the original name of this community).\n\n[**Gordian User Community**](https://github.com/BlockchainCommons/Gordian/discussions). For users of the Gordian reference apps, including [Gordian Coordinator](https://github.com/BlockchainCommons/iOS-GordianCoordinator), [Gordian Seed Tool](https://github.com/BlockchainCommons/GordianSeedTool-iOS), [Gordian Server](https://github.com/BlockchainCommons/GordianServer-macOS), [Gordian Wallet](https://github.com/BlockchainCommons/GordianWallet-iOS), and [SpotBit](https://github.com/BlockchainCommons/spotbit) as well as our whole series of [CLI apps](https://github.com/BlockchainCommons/Gordian/blob/master/Docs/Overview-Apps.md#cli-apps). This is a place to talk about bug reports and feature requests as well as to explore how our reference apps embody the [Gordian Principles](https://github.com/BlockchainCommons/Gordian#gordian-principles).\n\n[**Blockchain Commons Discussions**](https://github.com/BlockchainCommons/Community/discussions). For developers, interns, and patrons of Blockchain Commons, please use the discussions area of the [Community repo](https://github.com/BlockchainCommons/Community) to talk about general Blockchain Commons issues, the intern program, or topics other than those covered by the [Gordian Developer Community](https://github.com/BlockchainCommons/Gordian-Developer-Community/discussions) or the \n[Gordian User Community](https://github.com/BlockchainCommons/Gordian/discussions).\n### Other Questions \u0026 Problems\n\nAs an open-source, open-development community, Blockchain Commons does not have the resources to provide direct support of our projects. Please consider the discussions area as a locale where you might get answers to questions. Alternatively, please use this repository's [issues](./issues) feature. Unfortunately, we can not make any promises on response time.\n\nIf your company requires support to use our projects, please feel free to contact us directly about options. We may be able to offer you a contract for support from one of our contributors, or we might be able to point you to another entity who can offer the contractual support that you need.\n\n### Credits\n\nThe following people directly contributed to this repository. You can add your name here by getting involved. The first step is learning how to contribute from our [CONTRIBUTING.md](./CONTRIBUTING.md) documentation.\n\n| Name              | Role                | Github                                            | Email                                 | GPG Fingerprint                                    |\n| ----------------- | ------------------- | ------------------------------------------------- | ------------------------------------- | -------------------------------------------------- |\n| Christopher Allen | Principal Architect | [@ChristopherA](https://github.com/ChristopherA) | \\\u003cChristopherA@LifeWithAlacrity.com\\\u003e | FDFE 14A5 4ECB 30FC 5D22  74EF F8D3 6C91 3574 05ED |\n| Christian Murray | Lead Developer | [@watersnake1](https://github.com/watersnake1) | \\\u003cChristian.B.Murray.21@Dartmouth.edu\\\u003e | 9A44 D707 5580 A022 8A99  8CEC 0178 C17E 95C7 BA35 |\n| Jo | Install Script Developer | [@jodobear](https://github.com/jodobear) | \\\u003c\\\u003e | EE06 0B4A 9AED 976B 7CBD B3A0 3A9C 7E87 3028 4351 |\n| Gautham Ganesh Elango | Developer, Integration with Gordian Wallet, Testing | [@gg2001](https://github.com/gg2001) | \\\u003cgautham.gg@gmail.com\\\u003e | AB93 8223 226D 9511 4499 A6E5 420E 32E3 5B3F DBA2 |\n\n## Responsible Disclosure\n\nWe want to keep all of our software safe for everyone. If you have discovered a security vulnerability, we appreciate your help in disclosing it to us in a responsible manner. We are unfortunately not able to offer bug bounties at this time.\n\nWe do ask that you offer us good faith and use best efforts not to leak information or harm any user, their data, or our developer community. Please give us a reasonable amount of time to fix the issue before you publish it. Do not defraud our users or us in the process of discovery. We promise not to bring legal action against researchers who point out a problem provided they do their best to follow the these guidelines.\n\n### Reporting a Vulnerability\n\nPlease report suspected security vulnerabilities in private via email to ChristopherA@BlockchainCommons.com (do not use this email for support). Please do NOT create publicly viewable issues for suspected security vulnerabilities.\n\nThe following keys may be used to communicate sensitive information to developers:\n\n| Name              | Fingerprint                                        |\n| ----------------- | -------------------------------------------------- |\n| Christopher Allen | FDFE 14A5 4ECB 30FC 5D22  74EF F8D3 6C91 3574 05ED |\n| Christian Murray |  9A44 D707 5580 A022 8A99  8CEC 0178 C17E 95C7 BA35|\n\nYou can import a key by running the following command with that individual’s fingerprint: `gpg --recv-keys \"\u003cfingerprint\u003e\"` Ensure that you put quotes around fingerprints that contain spaces.\n\n---\n\n\n","funding_links":["https://github.com/sponsors/BlockchainCommons","https://github.com/sponsors/ChristopherA","https://btcpay.blockchaincommons.com"],"categories":["Applications"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FBlockchainCommons%2Fspotbit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FBlockchainCommons%2Fspotbit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FBlockchainCommons%2Fspotbit/lists"}