socket-security[bot]
commented
8 months ago New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Packages | Version | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|---|
| @koraykoska/uniswap-sdk-core | 3.2.6 | None | +10 |
933 kB | koraykoska |
| jest-environment-jsdom | 29.7.0 | eval, network, environment | +67 |
12.5 MB | simenb |
| jest | 29.7.0 | eval | +153 |
19.1 MB | simenb |
| ts-jest | 29.1.1 | eval, environment | +156 |
51.6 MB | kul |
| prettier | 2.8.8 | filesystem, environment | +0 |
11.2 MB | prettier-bot |
| tslib | 2.6.2 | None | +0 |
84 kB | typescript-bot |
| ethers | 5.7.2 | network | +38 |
17.9 MB | ricmoo |
| commander | 11.1.0 | environment | +0 |
177 kB | abetomo |
| typescript | 5.3.2 | None | +0 |
32 MB | typescript-bot |
| @uniswap/v3-staker | 1.0.0...1.0.2 | None | +1/-12 |
867 kB | noahwz |
| @ethersproject/solidity | 5.0.9...5.7.0 | None | +10/-10 |
675 kB | ricmoo |
| @uniswap/v3-periphery | 1.1.1...1.4.4 | None | +0/-11 |
700 kB | mtoda |
| @uniswap/swap-router-contracts | 1.2.1...1.3.1 | None | +2/-12 |
1.12 MB | cmcewen |
| @ethersproject/abi | 5.0.12...5.7.0 | None | +21/-20 |
2.24 MB | ricmoo |
| tiny-invariant | 1.1.0...1.3.1 | None | +0/-0 |
12.2 kB | alexreardon |
🚮 Removed packages: @uniswap/sdk-core@4.0.2, tsdx@0.14.1
stale[bot]
TheWolfOfChain
This PR is finalized but depends on https://github.com/Uniswap/sdk-core/pull/69 being merged (we will need to update the dependency version in the package.json once the Core SDK has been published)
This is part of the sdk upgrade grant.
Updates
Important backwards compatibility notes
(Similar to the Core SDK updates)
The updates in this PR are fully source-code compatible and non-breaking. But explicit < es2020 projects will not be able to compile it. So, if people use a modern setup, they won't have to change anything in their existing code but can start using native BigInt (and even if not will feel a performance difference). Because of the above, I propose making a major version bump anyways. That way, users will need to explicitly opt-in to the new v3-sdk, but if they do they don't have to update any source code.