Main wagmi

[Dargon789]

No description provided.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
sequence.js	Ready	Preview, Comment	May 9, 2026 7:27am
wagmi-project	Ready	Preview, Comment	May 9, 2026 7:27am

[sourcery-ai]

Sorry, we are unable to review this pull request

The GitHub API does not allow us to fetch diffs exceeding 300 files, and this pull request has 1437

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
🔚	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[mergify]

⚠️ The sha of the head commit of this PR conflicts with #550. Mergify cannot evaluate rules on this PR. Once #550 is merged or closed, Mergify will resume processing this PR. ⚠️

[gemini-code-assist]

Code Review

This pull request introduces significant infrastructure updates, including new CI/CD configurations, issue templates, and project-wide linting/formatting via Biome. It also improves security by using cryptographically secure randomness and masking internal error details. The review identified several areas for improvement: removing V8 compile cache artifacts, addressing a command injection vulnerability in the CLI utilities, updating hardcoded URLs in CI configurations, correcting a fragile array sorting implementation, and resolving a race condition in the CLI's watch process.

[gemini-code-assist]

This file appears to be a V8 compile cache artifact. Build artifacts and cache files should not be committed to the repository as they clutter the history and increase the repository size unnecessarily. Please remove this directory and ensure it is included in your .gitignore.

[gemini-code-assist]

Using execSync with string interpolation of packageName is vulnerable to command injection. A malicious package name could execute arbitrary commands on the system. It is safer to use spawnSync with an arguments array, which avoids shell interpretation of the arguments.

[gemini-code-assist]

This URL contains a hardcoded reference to a personal GitHub repository (Dargon789/foundry). This should be updated to point to the correct organization or project repository to ensure consistency and proper access to environment variables.

[gemini-code-assist]

This URL contains a hardcoded reference to a personal GitHub repository (Dargon789/hardhat-project). This should be updated to point to the correct organization or project repository.

[gemini-code-assist]

Array.prototype.sort() without a compare function converts elements to strings before sorting. For an array of [key, value] pairs, this results in sorting by the string representation of the entire pair (e.g., "key,[object Object]"), which is fragile. It is better to provide an explicit comparator that sorts by the key.

Suggested change

	const sortedAscContractMap = new Map([...contractMap].sort())
	const sortedAscContractMap = new Map([...contractMap].sort((a, b) => a[0].localeCompare(b[0])))

[gemini-code-assist]

The setTimeout callback is async, but setTimeout does not await its completion. While clearTimeout prevents multiple timers from being scheduled, it does not prevent a new execution from starting if a previous one is still running (since timeout is set to null at the start of the callback). This could lead to race conditions and multiple concurrent writes to the same file if the generation process is slow. Consider using a lock or a promise chain to ensure serial execution.

[gemini-code-assist]

Include spawnSync in the imports to allow for safer command execution without shell interpretation.

Suggested change

	import { execSync } from 'node:child_process'
	import { execSync, spawnSync } from 'node:child_process'