Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release/1.4.0 #108

Merged
merged 10 commits into from
Mar 26, 2024
Merged

Release/1.4.0 #108

merged 10 commits into from
Mar 26, 2024

Conversation

piyalbasu
Copy link
Contributor

No description provided.

@acharb
fix broken test (#93)
4af8f0d
@acharb
add sep10 sign challenge txn helper (#95)
1a29297 
* add sep10 helper method

* name change

* correct resp

* create server module
@acharb
add npm publish gha (#96)
d2df226
@acharb
WAL-1064 - add anchor platform integration tests (#99)
888fd71
@acharb
create workspace (#101)
3940812 
* create workspace

* try

* try

* try

* try

* cleanup

* update anchor platform docker run

* fix

* fix

* upgrade babel/traverse

* upgrade browserify-sign

* add keypair package in a second workspace (#102)

* add km package

* fix tests

* cleanup
@socket-security Socket Security
Copy link

socket-security bot commented Mar 18, 2024 •
edited

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@albedo-link/intent@0.12.0 None 0 162 kB orbitlens
npm/@babel/code-frame@7.18.6 None +2 27 kB nicolo-ribaudo
npm/@babel/core@7.21.0 environment, filesystem, unsafe +1 973 kB nicolo-ribaudo
npm/@babel/generator@7.21.1 None +1 503 kB nicolo-ribaudo
npm/@babel/helper-module-imports@7.18.6 None 0 16.1 kB nicolo-ribaudo
npm/@babel/helper-module-transforms@7.21.0 None +2 153 kB nicolo-ribaudo
npm/@babel/helper-simple-access@7.20.2 None 0 13.7 kB nicolo-ribaudo
npm/@babel/helper-string-parser@7.23.4 None 0 31.6 kB nicolo-ribaudo
npm/@babel/helper-validator-identifier@7.19.1 None 0 51.7 kB nicolo-ribaudo
npm/@babel/helpers@7.21.0 None 0 542 kB nicolo-ribaudo
npm/@babel/parser@7.21.1 None 0 1.95 MB nicolo-ribaudo
npm/@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.23.7 None +1 36.9 kB nicolo-ribaudo
npm/@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2 None 0 16.3 kB nicolo-ribaudo
npm/@babel/plugin-syntax-import-attributes@7.23.3 None 0 5.19 kB nicolo-ribaudo
npm/@babel/plugin-syntax-jsx@7.23.3 None 0 4.21 kB nicolo-ribaudo
npm/@babel/plugin-syntax-typescript@7.23.3 None 0 6.94 kB nicolo-ribaudo
npm/@babel/plugin-syntax-unicode-sets-regex@7.18.6 None 0 3.4 kB nicolo-ribaudo
npm/@babel/plugin-transform-async-generator-functions@7.23.9 None +6 71 kB nicolo-ribaudo
npm/@babel/plugin-transform-class-properties@7.23.3 None +7 567 kB nicolo-ribaudo
npm/@babel/plugin-transform-class-static-block@7.23.4 None +2 16.4 kB nicolo-ribaudo
npm/@babel/plugin-transform-dynamic-import@7.23.4 None +1 8.69 kB nicolo-ribaudo
npm/@babel/plugin-transform-export-namespace-from@7.23.4 None +1 10.7 kB nicolo-ribaudo
npm/@babel/plugin-transform-json-strings@7.23.4 None +1 8.44 kB nicolo-ribaudo
npm/@babel/plugin-transform-logical-assignment-operators@7.23.4 None 0 8.59 kB nicolo-ribaudo
npm/@babel/plugin-transform-nullish-coalescing-operator@7.23.4 None +1 11.7 kB nicolo-ribaudo
npm/@babel/plugin-transform-numeric-separator@7.23.4 None 0 5.41 kB nicolo-ribaudo
npm/@babel/plugin-transform-object-rest-spread@7.24.0 Transitive: environment, filesystem, shell +12 425 kB nicolo-ribaudo
npm/@babel/plugin-transform-optional-catch-binding@7.23.4 None +1 7.38 kB nicolo-ribaudo
npm/@babel/plugin-transform-optional-chaining@7.23.4 None +2 43.9 kB nicolo-ribaudo
npm/@babel/plugin-transform-private-methods@7.23.3 None +1 8.25 kB nicolo-ribaudo
npm/@babel/plugin-transform-private-property-in-object@7.23.4 None +1 23.5 kB nicolo-ribaudo
npm/@babel/plugin-transform-typescript@7.23.6 None +1 136 kB nicolo-ribaudo
npm/@babel/plugin-transform-unicode-property-regex@7.23.3 None +12 866 kB nicolo-ribaudo
npm/@babel/plugin-transform-unicode-sets-regex@7.23.3 None +11 839 kB nicolo-ribaudo
npm/@babel/preset-env@7.24.3 environment, filesystem Transitive: unsafe +104 11.1 MB nicolo-ribaudo
npm/@babel/preset-typescript@7.23.3 None +5 294 kB nicolo-ribaudo
npm/@babel/template@7.20.7 None 0 68.8 kB nicolo-ribaudo
npm/@babel/traverse@7.24.0 Transitive: environment +12 3.81 MB nicolo-ribaudo
npm/@eslint/eslintrc@2.1.4 filesystem, unsafe Transitive: environment +9 1.42 MB eslintbot
npm/@eslint/js@8.57.0 None 0 13.9 kB eslintbot
npm/@humanwhocodes/config-array@0.11.14 None 0 55.6 kB nzakas
npm/@humanwhocodes/object-schema@2.0.2 None 0 53.3 kB nzakas
npm/@jridgewell/set-array@1.1.2 None 0 15.5 kB jridgewell
npm/@ledgerhq/devices@5.51.1 None +1 5.24 MB gre
npm/@ledgerhq/errors@5.50.0 None 0 78 kB gre
npm/@ledgerhq/hw-app-str@6.28.4 None +7 5.29 MB ldg-github-ci
npm/@ledgerhq/hw-transport-u2f@5.36.0-deprecated None +2 184 kB gre
npm/@ledgerhq/logs@5.50.0 None 0 27.4 kB gre
npm/@stellar/freighter-api@2.0.0 None 0 58.8 kB piyalbasu
npm/@trezor/connect-plugin-stellar@9.0.3 Transitive: environment, filesystem, network +19 14.9 MB trezor-ci
npm/@types/jest@29.5.12 Transitive: environment, unsafe +15 3.9 MB types
npm/@types/json-schema@7.0.11 None 0 32.2 kB types
npm/@typescript-eslint/parser@6.21.0 None +2 649 kB jameshenry
npm/@typescript-eslint/parser@7.3.1 Transitive: filesystem +14 1.9 MB jameshenry
npm/@typescript-eslint/types@6.21.0 None 0 156 kB jameshenry
npm/@typescript-eslint/typescript-estree@6.21.0 Transitive: environment, filesystem +10 1.51 MB jameshenry
npm/@webpack-cli/info@2.0.2 None 0 3.72 kB evilebottnawi
npm/@webpack-cli/serve@2.0.5 environment 0 11.6 kB evilebottnawi
npm/asn1.js@4.10.1 unsafe 0 46.6 kB indutny
npm/browserify-sign@4.2.3 Transitive: environment +7 264 kB ljharb
npm/browserslist@4.21.5 environment, filesystem Transitive: shell +6 2.26 MB ai
npm/create-jest@29.7.0 Transitive: environment, eval, filesystem, network, shell, unsafe +113 7.39 MB simenb
npm/cross-fetch@3.1.8 network +4 568 kB lquixada
npm/elliptic@6.5.5 None +2 148 kB indutny
npm/enhanced-resolve@5.15.1 unsafe 0 189 kB evilebottnawi
npm/eslint@8.57.0 environment, filesystem Transitive: unsafe +38 5.4 MB eslintbot
npm/husky@9.0.11 environment, filesystem, shell 0 3.61 kB typicode
npm/isarray@1.0.0 None 0 3.89 kB juliangruber
npm/jest-mock-random@1.1.1 None 0 5.99 kB sir-people
npm/jest@29.7.0 Transitive: environment, eval, filesystem, network, shell, unsafe +111 13.5 MB simenb
npm/node-localstorage@3.0.5 filesystem +3 131 kB lmaccherone
npm/parse-asn1@5.1.7 None 0 24.7 kB ljharb
npm/prettier@3.2.5 environment, filesystem, unsafe 0 8.39 MB prettier-bot
npm/process@0.11.10 None 0 15.3 kB cwmma
npm/schema-utils@3.3.0 environment +1 158 kB evilebottnawi
npm/scrypt-async@2.0.1 None 0 33.6 kB dchest
npm/sinon@17.0.1 Transitive: environment, eval +6 6.9 MB fatso83
npm/terser-webpack-plugin@5.3.10 Transitive: environment, shell +4 3.78 MB evilebottnawi
npm/terser@5.28.1 environment, eval Transitive: filesystem +2 2.22 MB fabiosantoscode
npm/trezor-connect@8.2.12 None 0 505 kB trezor-ci
npm/ts-jest@29.1.2 environment, filesystem, unsafe +26 11.1 MB kul
npm/ts-loader@9.5.1 filesystem Transitive: network +1 484 kB johnnyreilly
npm/tslib@1.14.1 None 0 34 kB typescript-bot
npm/tweetnacl-util@0.15.1 None 0 8.14 kB dchest
npm/typescript@5.3.3 None 0 32 MB typescript-bot
npm/vm-browserify@1.1.2 None 0 15.5 kB goto-bus-stop
npm/webpack-cli@5.1.4 environment, filesystem, unsafe Transitive: eval, shell +19 656 kB evilebottnawi
npm/webpack@5.90.3 environment, filesystem, network, unsafe Transitive: eval +15 7.85 MB evilebottnawi

🚮 Removed packages: npm/@babel/helper-function-name@7.21.0, npm/@babel/helper-string-parser@7.24.1, npm/@jridgewell/resolve-uri@3.1.2, npm/@typescript-eslint/parser@6.7.5, npm/axios@1.4.0, npm/enhanced-resolve@5.14.0, npm/eslint@8.51.0, npm/parse-asn1@5.1.6, npm/schema-utils@3.1.2, npm/tslib@2.5.0, npm/typescript@5.0.4, npm/webpack-cli@5.1.1, npm/webpack@5.83.1

View full report↗︎

@socket-security Socket Security
Copy link

socket-security bot commented Mar 18, 2024 •
edited

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Network access npm/node-fetch@2.7.0
Network access npm/node-fetch@2.7.0
Network access npm/node-fetch@2.7.0
Network access npm/source-map@0.7.4
Filesystem access npm/source-map@0.7.4
Network access npm/cross-fetch@3.1.8
Debug access npm/jest-circus@29.7.0
Debug access npm/asn1.js@4.10.1
Filesystem access npm/node-localstorage@3.0.5
Debug access npm/prettier@3.2.5
Filesystem access npm/prettier@3.2.5
Filesystem access npm/husky@9.0.11
Debug access npm/enhanced-resolve@5.15.1
Filesystem access npm/@babel/preset-env@7.24.3

View full report↗︎

Next steps

What is network access?

This module accesses the network.

Packages should remove all network access that is functionally unnecessary. Consumers should audit network access to ensure legitimate use.

What is filesystem access?

Accesses the file system, and could potentially read sensitive data.

If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.

What is debug access?

Uses debug, reflection and dynamic code execution features.

Removing the use of debug will reduce the risk of any reflection and dynamic code execution.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/node-fetch@2.7.0
  • @SocketSecurity ignore npm/source-map@0.7.4
  • @SocketSecurity ignore npm/cross-fetch@3.1.8
  • @SocketSecurity ignore npm/jest-circus@29.7.0
  • @SocketSecurity ignore npm/asn1.js@4.10.1
  • @SocketSecurity ignore npm/node-localstorage@3.0.5
  • @SocketSecurity ignore npm/prettier@3.2.5
  • @SocketSecurity ignore npm/husky@9.0.11
  • @SocketSecurity ignore npm/enhanced-resolve@5.15.1
  • @SocketSecurity ignore npm/@babel/preset-env@7.24.3

@acharb
add second CD (#109)
e9943d8
@acharb
fix stellar-sdk imports (#112)
0434975 
* fix imports

* fix
@acharb
preparing for 1.4.0 release stuff (#110)
46513da 
* fix

* fix webpack process
@acharb
webpack fix (#113)
95cb1e7 
* webpack fix

* cleanup
@acharb
add helper for parsing AnchorTransaction (#111)
5d627da 
* add helper for parsing AnchorTransaction

* use kind

* add try-catch
acharb
acharb approved these changes Mar 26, 2024
View reviewed changes
Copy link
Contributor

@acharb acharb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm! chatted with @CassioMG on slack on adding the soroban PRs in 1.5.0, so we can go ahead and release 1.4.0

@acharb acharb merged commit 360f796 into main Mar 26, 2024
4 of 5 checks passed
@acharb acharb deleted the release/1.4.0 branch March 26, 2024 17:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@acharb acharb acharb approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@piyalbasu @acharb