search

SmartContractSecurity / SWC-registry

Smart Contract Weakness Classification and Test Cases
https://swcregistry.io/
MIT License
852 stars 167 forks source link

!!! This project is not actively maintained anymore !!! #276

Open thec00n opened 2 years ago

thec00n commented 2 years ago

The project does not have any core contributors that actively triage and merge new content or fix issues. If you want to become a contributor please leave a message in the comments.

pi3ch commented 2 years ago

I am happy to help out.

FaizanNehal commented 2 years ago

I would love to become a core contributor of this amazing registry. I learned a lot from it and I really want this to be carried on.

FaizanNehal commented 2 years ago

@thec00n Do let me know what you think of it

MingxiYe commented 1 year ago

I would love to make contributions. Please do not hesitate if anything I could help with.@thec00n

BubblyOrca commented 1 year ago

Happy to support @thec00n

chaals commented 1 year ago

The Enterprise Ethereum Alliance's EthTrust Security Levels Working Group carefully and gratefully combed through the entire registry here in creating the first version of the EthTrust Security Levels specification (as acknowledged in that spec).

We believe our v1 spec addressed every one of the weaknesses listed here (and would appreciate feedback if there's something we missed or didn't do well enough), as well as various other issues not mentioned.

We are actively maintaining our spec. We're working on a next version that we expect to publish later this year, but all drafts are public, and our process is to add things we think are improvements early and then iterate on them - only stuff we're not convinced is an improvement gets held back for further cleaning. So updates typically come every couple of weeks.

If people are OK with the idea, I would be happy to make Pull Request(s) that clarify that the information here dates from 2020 or before, and that it has been incorporated along with updated information in the EthTrust spec. (I.e. we have great respect for the work that went before us, but we want to make sure people are aware that it is unmaintained and for the latest they should look at the maintained EthTrust spec).

chaals commented 1 year ago

Work is in progress on pointing the content to newer, actively maintained work...