Skip to content

v2.0.0-alpha.3

Pre-release
Pre-release

Choose a tag to compare

@outsmartchad outsmartchad released this 22 Feb 02:39
· 44 commits to agent-trading-infra since this release

What's New

Security — Vulnerability Fixes

  • Removed @metaplex-foundation/js — eliminated 4 critical vulns (pbkdf2, sha.js, form-data) from Irys/NEAR/Aptos transitive deps. Dead code removal.
  • Removed @bloxroute/solana-trader-client-ts — replaced SDK with direct fetch() calls. Eliminated minimatch vuln from bundled np publish tool.
  • Added npm overrides for qs, brace-expansion to force patched versions of transitive deps.
  • Updated axios to ^1.7.9.
  • Result: Dependabot alerts dropped from 20 (4 critical, 7 high) → 3 (2 high, 1 moderate). All remaining are transitive deps from upstream Solana SDKs.

Bug Fixes

  • Fixed DLMM claimFees type error — handle Transaction[] return from updated Meteora SDK.

Tests

  • Reduced BUY_AMOUNT_SOL from 0.02 to 0.002 SOL — all 97 mainnet tests pass at the lower amount.

Install

npm install -g outsmart@2.0.0-alpha.3

Full Changelog: v2.0.0-alpha.2...v2.0.0-alpha.3