search

OpenZeppelin / contracts-wizard

Interactive smart contract generator based on OpenZeppelin Contracts.
https://wizard.openzeppelin.com
MIT License
245 stars 135 forks source link

Use Contracts for Cairo v0.10.0 #344

Closed ericglau closed 6 months ago

ericglau commented 6 months ago

Fixes #343

socket-security[bot] commented 6 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@pkgjs/parseargs@0.11.0 None 0 74.2 kB oss-bot
npm/@polka/url@1.0.0-next.24 None 0 4.38 kB lukeed
npm/@popperjs/core@2.11.8 None 0 1.46 MB fezvrasta
npm/@rollup/plugin-alias@5.1.0 Transitive: environment, filesystem, unsafe +3 6.9 MB shellscape
npm/@rollup/plugin-commonjs@25.0.7 filesystem Transitive: environment, unsafe +18 7.92 MB shellscape
npm/@rollup/plugin-json@6.1.0 Transitive: environment, filesystem, unsafe +6 7.11 MB shellscape
npm/@rollup/plugin-node-resolve@15.2.3 filesystem Transitive: environment, unsafe +17 7.49 MB shellscape
npm/@rollup/plugin-replace@5.0.5 Transitive: environment, filesystem, unsafe +8 7.62 MB shellscape
npm/@rollup/plugin-typescript@11.1.6 environment, filesystem Transitive: unsafe +14 39.9 MB shellscape
npm/@rollup/pluginutils@5.1.0 Transitive: environment, filesystem, unsafe +5 7.1 MB shellscape
npm/@rollup/rollup-android-arm-eabi@4.12.0 None 0 1.63 MB lukastaegert
npm/@rollup/rollup-android-arm64@4.12.0 None 0 2.49 MB lukastaegert
npm/@rollup/rollup-darwin-arm64@4.12.0 None 0 2.41 MB lukastaegert
npm/@rollup/rollup-darwin-x64@4.12.0 None 0 2.58 MB lukastaegert
npm/@rollup/rollup-linux-arm-gnueabihf@4.12.0 None 0 2.43 MB lukastaegert
npm/@rollup/rollup-linux-arm64-gnu@4.12.0 None 0 2.47 MB lukastaegert
npm/@rollup/rollup-linux-arm64-musl@4.12.0 None 0 2.37 MB lukastaegert
npm/@rollup/rollup-linux-riscv64-gnu@4.12.0 None 0 2.54 MB lukastaegert
npm/@rollup/rollup-linux-x64-gnu@4.12.0 None 0 2.73 MB lukastaegert
npm/@rollup/rollup-linux-x64-musl@4.12.0 None 0 2.73 MB lukastaegert
npm/@rollup/rollup-win32-arm64-msvc@4.12.0 None 0 2.93 MB lukastaegert
npm/@rollup/rollup-win32-ia32-msvc@4.12.0 None 0 2.64 MB lukastaegert
npm/@rollup/rollup-win32-x64-msvc@4.12.0 None 0 3.44 MB lukastaegert
npm/@sindresorhus/merge-streams@2.3.0 None 0 10.5 kB sindresorhus
npm/@trysound/sax@0.2.0 None 0 48.8 kB trysound
npm/@types/cssnano@5.1.0 Transitive: environment, filesystem, network, shell, unsafe +68 10.4 MB types
npm/@types/estree@1.0.5 None 0 25.7 kB types
npm/@types/file-saver@2.0.7 None 0 6.31 kB types
npm/@types/parse-json@4.0.2 None 0 2.95 kB types
npm/@types/pug@2.0.10 None 0 9.7 kB types
npm/@types/resize-observer-browser@0.1.11 None 0 5.44 kB types
npm/@types/semver@7.5.8 None 0 23.3 kB types
npm/@types/uuid@9.0.8 None 0 6.74 kB types
npm/@vercel/nft@0.26.4 environment, eval, unsafe Transitive: filesystem, network, shell +70 2.99 MB vercel-release-bot
npm/any-promise@1.3.0 None 0 22.2 kB kevinbeaty
npm/array-find-index@1.0.2 None 0 2.88 kB sindresorhus
npm/array.prototype.flat@1.3.2 Transitive: eval +60 3.32 MB ljharb
npm/array.prototype.flatmap@1.3.2 Transitive: eval +60 3.32 MB ljharb
npm/arrgv@1.0.2 None 0 9.07 kB astur
npm/arrify@3.0.0 None 0 3.5 kB sindresorhus
npm/autoprefixer@10.4.18 environment Transitive: filesystem, shell +13 3.07 MB ai
npm/ava@6.1.2 Transitive: environment, eval, filesystem, network, shell, unsafe +164 7.66 MB novemberborn
npm/browserslist@4.23.0 environment, filesystem Transitive: shell +6 2.38 MB ai
npm/buffer-crc32@0.2.13 None 0 7.95 kB brianloveswords
npm/callsites@4.1.0 None 0 6.53 kB sindresorhus
npm/camelcase-css@2.0.1 None 0 4.05 kB stevenvachon
npm/caniuse-lite@1.0.30001591 None 0 1.97 MB caniuse-lite
npm/ci-info@4.0.0 environment 0 27.3 kB sibiraj-s
npm/colord@2.9.3 None 0 114 kB omgovich
npm/commander@7.2.0 filesystem, shell 0 145 kB abetomo
npm/console-clear@1.1.1 None 0 2.46 kB lukeed
npm/cosmiconfig@7.1.0 filesystem Transitive: environment, unsafe +23 794 kB d-fischer
npm/css-declaration-sorter@7.1.1 Transitive: environment, filesystem +4 471 kB siilwyn
npm/css-select@5.1.0 Transitive: network +8 1.02 MB feedic
npm/css-tree@2.3.1 unsafe +2 1.94 MB lahmatiy
npm/css-what@6.1.0 None 0 66 kB feedic
npm/cssnano-preset-default@6.0.5 Transitive: environment, filesystem, network, shell, unsafe +65 10.4 MB ludovicofischer
npm/cssnano-utils@4.0.1 Transitive: environment, filesystem +4 381 kB ludovicofischer
npm/cssnano@6.0.5 Transitive: environment, filesystem, network, shell, unsafe +67 10.4 MB ludovicofischer
npm/csso@5.0.5 unsafe +3 2.5 MB lahmatiy
npm/decode-uri-component@0.2.2 None 0 6.09 kB samverschueren
npm/detect-indent@6.1.0 None 0 9.68 kB sindresorhus
npm/didyoumean@1.2.2 None 0 17.3 kB dcporter
npm/dlv@1.1.3 None 0 5.8 kB developit
npm/dom-serializer@2.0.0 None +3 528 kB feedic
npm/domelementtype@2.3.0 None 0 11.4 kB feedic
npm/domhandler@5.0.3 None +1 86.7 kB feedic
npm/domutils@3.1.0 network +4 690 kB feedic
npm/entities@4.5.0 None 0 413 kB feedic
npm/es6-promise@3.3.1 eval 0 173 kB stefanpenner
npm/estree-walker@2.0.2 None 0 50.2 kB rich_harris
npm/eventemitter3@4.0.7 None 0 38 kB lpinca
npm/file-saver@2.0.5 None 0 36 kB endless
npm/filter-obj@1.1.0 None 0 2.95 kB sindresorhus
npm/foreground-child@3.1.1 shell Transitive: environment, filesystem +7 189 kB isaacs
npm/highlight.js@11.9.0 None 0 5.29 MB highlightjs_bot
npm/highlightjs-cairo@0.4.0 None 0 10.5 kB ericglau
npm/highlightjs-solidity@2.0.6 None 0 42 kB haltman
npm/icss-utils@5.1.0 Transitive: environment, filesystem +4 386 kB evilebottnawi
npm/immediate@3.0.6 None 0 14.6 kB cwmma
npm/is-arguments@1.1.1 Transitive: eval +13 278 kB ljharb
npm/is-generator-function@1.0.10 eval +2 70.1 kB ljharb
npm/jackspeak@2.3.6 environment +14 601 kB isaacs
npm/jest-worker@26.6.2 environment, shell +3 4.15 MB simenb
npm/jiti@1.21.0 environment, filesystem, unsafe 0 1.91 MB pi0
npm/jszip@3.10.1 Transitive: environment +12 1.79 MB stuk
npm/kleur@4.1.5 None 0 20.3 kB lukeed
npm/lilconfig@3.1.1 filesystem 0 17.7 kB antonk52
npm/livereload-js@3.4.1 environment, eval 0 265 kB smhg
npm/livereload@0.9.3 filesystem, network Transitive: environment, eval +18 1 MB bphogan
npm/local-access@1.1.0 environment 0 4.96 kB lukeed
npm/magic-string@0.30.7 None +1 493 kB antfu
npm/mdn-data@2.0.30 None 0 602 kB schalkneethling
npm/min-indent@1.0.1 None 0 2.97 kB thejameskyle
npm/mri@1.2.0 None 0 13.3 kB lukeed
npm/mrmime@2.0.0 None 0 32.7 kB lukeed
npm/mz@2.7.0 filesystem, network, shell +4 52 kB jongleberry
npm/normalize-url@6.1.0 None 0 21.2 kB sindresorhus
npm/object-hash@3.0.0 None 0 58.9 kB addaleax
npm/p-queue@6.6.2 None +3 79.4 kB sindresorhus
npm/path-browserify@1.0.1 None 0 54.3 kB goto-bus-stop
npm/path-scurry@1.10.1 filesystem +1 599 kB isaacs
npm/pify@2.3.0 None 0 6.02 kB sindresorhus
npm/pirates@4.0.6 unsafe 0 13.5 kB danez
npm/postcss-calc@9.0.1 Transitive: environment, filesystem +8 762 kB ludovicofischer
npm/postcss-colormin@6.0.3 Transitive: environment, filesystem, shell +15 2.95 MB ludovicofischer
npm/postcss-convert-values@6.0.4 Transitive: environment, filesystem, shell +11 2.79 MB ludovicofischer
npm/postcss-discard-comments@6.0.1 Transitive: environment, filesystem +4 386 kB ludovicofischer
npm/postcss-discard-duplicates@6.0.2 Transitive: environment, filesystem +4 382 kB ludovicofischer
npm/postcss-discard-empty@6.0.2 Transitive: environment, filesystem +4 380 kB ludovicofischer
npm/postcss-discard-overridden@6.0.1 Transitive: environment, filesystem +4 382 kB ludovicofischer
npm/postcss-import@15.1.0 Transitive: environment, filesystem +13 676 kB ryanzim
npm/postcss-js@4.0.1 Transitive: environment, filesystem +5 388 kB ai
npm/postcss-load-config@4.0.2 environment, unsafe Transitive: filesystem +26 39.6 MB ai
npm/postcss-load-config@5.0.3 environment Transitive: filesystem, unsafe +6 2.33 MB ai
npm/postcss-merge-longhand@6.0.3 Transitive: environment, filesystem, shell +15 3.06 MB ludovicofischer
npm/postcss-merge-rules@6.0.4 Transitive: environment, filesystem, shell +17 3.04 MB ludovicofischer
npm/postcss-minify-font-values@6.0.2 Transitive: environment, filesystem +5 419 kB ludovicofischer
npm/postcss-minify-gradients@6.0.2 Transitive: environment, filesystem +7 532 kB ludovicofischer
npm/postcss-minify-params@6.0.3 Transitive: environment, filesystem, shell +12 2.79 MB ludovicofischer
npm/postcss-minify-selectors@6.0.2 Transitive: environment, filesystem +7 594 kB ludovicofischer
npm/postcss-modules-extract-imports@3.0.0 Transitive: environment, filesystem +4 388 kB evilebottnawi
npm/postcss-modules-local-by-default@4.0.4 Transitive: environment, filesystem +9 644 kB evilebottnawi
npm/postcss-modules-scope@3.1.1 Transitive: environment, filesystem +7 599 kB evilebottnawi
npm/postcss-modules-values@4.0.0 Transitive: environment, filesystem +5 395 kB evilebottnawi
npm/postcss-nested@6.0.1 Transitive: environment, filesystem +7 598 kB ai
npm/postcss-normalize-charset@6.0.1 Transitive: environment, filesystem +4 380 kB ludovicofischer
npm/postcss-normalize-display-values@6.0.1 Transitive: environment, filesystem +5 408 kB ludovicofischer
npm/postcss-normalize-positions@6.0.1 Transitive: environment, filesystem +5 411 kB ludovicofischer
npm/postcss-normalize-repeat-style@6.0.1 Transitive: environment, filesystem +5 410 kB ludovicofischer
npm/postcss-normalize-string@6.0.1 Transitive: environment, filesystem +5 414 kB ludovicofischer
npm/postcss-normalize-timing-functions@6.0.1 Transitive: environment, filesystem +5 409 kB ludovicofischer
npm/postcss-normalize-unicode@6.0.3 Transitive: environment, filesystem, shell +11 2.78 MB ludovicofischer
npm/postcss-normalize-url@6.0.1 Transitive: environment, filesystem +5 413 kB ludovicofischer
npm/postcss-normalize-whitespace@6.0.1 Transitive: environment, filesystem +5 409 kB ludovicofischer
npm/postcss-ordered-values@6.0.1 Transitive: environment, filesystem +6 437 kB ludovicofischer
npm/postcss-reduce-initial@6.0.3 Transitive: environment, filesystem, shell +13 2.82 MB ludovicofischer
npm/postcss-reduce-transforms@6.0.1 Transitive: environment, filesystem +5 412 kB ludovicofischer
npm/postcss-selector-parser@6.0.15 None +2 209 kB evilebottnawi
npm/postcss-svgo@6.0.2 Transitive: environment, filesystem, network, shell, unsafe +22 7.08 MB ludovicofischer
npm/postcss-unique-selectors@6.0.2 Transitive: environment, filesystem +7 589 kB ludovicofischer
npm/postcss-value-parser@4.2.0 None 0 27.2 kB evilebottnawi
npm/postcss@8.4.35 environment, filesystem +3 376 kB ai
npm/query-string@7.1.3 None +4 61.6 kB sindresorhus
npm/resolve.exports@2.0.2 None 0 23.9 kB lukeed
npm/resolve@1.22.8 environment, filesystem +5 232 kB ljharb
npm/rimraf@5.0.5 environment, filesystem Transitive: shell +52 3.07 MB isaacs
npm/rollup-plugin-livereload@2.0.5 environment, network, shell Transitive: eval, filesystem +19 1.02 MB thgh
npm/rollup-plugin-styles@4.0.0 environment, filesystem Transitive: network, shell, unsafe +168 24.2 MB anidetrix
npm/rollup-plugin-svelte@7.1.6 filesystem Transitive: environment, unsafe +27 13.7 MB conduitry
npm/rollup-plugin-terser@7.0.2 eval Transitive: environment, filesystem, shell, unsafe +32 15.4 MB trysound
npm/rollup@2.79.1 environment, filesystem, unsafe +1 6.88 MB lukastaegert
npm/sade@1.8.1 None +1 44.8 kB lukeed
npm/sander@0.5.1 filesystem Transitive: environment, eval +16 623 kB rich_harris
npm/semiver@1.1.0 None 0 5.44 kB lukeed
npm/sirv-cli@2.0.2 environment, filesystem, network +12 172 kB lukeed
npm/sorcery@0.11.0 Transitive: environment, eval, filesystem +19 834 kB rich_harris
npm/source-map-js@1.0.2 None 0 148 kB 7rulnik
npm/strip-indent@3.0.0 None +1 6.28 kB sindresorhus
npm/sucrase@3.35.0 Transitive: environment, filesystem, network, shell, unsafe +41 3.85 MB alangpierce
npm/svelte-check@3.6.6 Transitive: environment, eval, filesystem, unsafe +100 56.1 MB svelte-language-tools-deploy
npm/svelte-preprocess@5.1.3 environment, filesystem Transitive: eval, unsafe +68 46.3 MB kaisermann
npm/svelte@3.59.2 None 0 10.6 MB conduitry
npm/svelte@4.2.12 Transitive: unsafe +21 6.61 MB svelte-admin
npm/tailwindcss@3.4.1 environment, filesystem Transitive: network, shell, unsafe +116 52.3 MB adamwathan
npm/tippy.js@6.3.7 environment +1 3.53 MB atomiks
npm/typescript@5.4.2 None 0 32.4 MB typescript-bot
npm/util@0.12.5 environment Transitive: eval +22 486 kB goto-bus-stop
npm/uuid@9.0.1 None 0 123 kB ctavan
npm/yaml@1.10.2 environment 0 448 kB eemeli

🚮 Removed packages: npm/@nomicfoundation/hardhat-toolbox@4.0.0, npm/@openzeppelin/hardhat-upgrades@3.0.5

View full report↗︎

socket-security[bot] commented 6 months ago

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/svelte-preprocess@5.1.3
  • Install script: postinstall
  • Source: echo "[svelte-preprocess] Don't forget to install the preprocessors packages that will be used: sass, stylus, less, postcss & postcss-load-config, coffeescript, pug, etc..."

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/svelte-preprocess@5.1.3
ericglau commented 6 months ago

@SocketSecurity ignore npm/svelte-preprocess@5.1.3