blocknative / web3-onboard

Client library to onboard users to web3 apps
https://onboard.blocknative.com/
MIT License
837 stars 496 forks source link

feat: add @web3-onboard/okx #2229

Closed vanishcode closed 3 months ago

vanishcode commented 3 months ago

Description

okx sdk module support

PLEASE NOTE- Checklist must be complete prior to review.

Checklist

Docs Checklist

If this PR includes changes to add an injected wallet or SDK wallet module:

Please complete the following using the internal demo package. To run this demo use the command yarn && yarn dev to get the project running at http://localhost:8080/

Tests with demo app (injected)

Tests with demo app (SDK)

socket-security[bot] commented 3 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@0xpass/models@2.0.0 None 0 11.1 kB kwk236
npm/@0xpass/passport-viem@2.0.1 network 0 20.7 kB kwk236
npm/@0xpass/passport@2.1.1 None 0 92.3 kB kwk236
npm/@0xpass/webauthn-signer@2.0.0 None +1 310 kB kwk236
npm/@adraffy/ens-normalize@1.10.1 None 0 446 kB adraffy
npm/@ampproject/remapping@2.2.1 None 0 76 kB jridgewell
npm/@apocentre/alias-sampling@0.5.3 None 0 24.3 kB antwnic4
npm/@arcana/auth@1.0.10 network 0 928 kB makyl
npm/@babel/code-frame@7.12.11 None +2 31.6 kB nicolo-ribaudo
npm/@babel/compat-data@7.17.0 None 0 50.5 kB nicolo-ribaudo
npm/@babel/core@7.23.2 environment, filesystem, unsafe +10 2.26 MB nicolo-ribaudo
npm/@babel/helper-annotate-as-pure@7.22.5 None 0 4.02 kB nicolo-ribaudo
npm/@babel/helper-compilation-targets@7.22.15 None +1 116 kB nicolo-ribaudo
npm/@babel/helper-create-class-features-plugin@7.22.15 None +5 303 kB nicolo-ribaudo
npm/@babel/helper-define-polyfill-provider@0.3.1 unsafe +1 267 kB nicolo-ribaudo
npm/@babel/helper-module-imports@7.22.15 None 0 54.4 kB nicolo-ribaudo
npm/@babel/helper-plugin-utils@7.16.7 None 0 4.41 kB nicolo-ribaudo
npm/@babel/helper-validator-option@7.22.15 None 0 11.6 kB nicolo-ribaudo
npm/@babel/parser@7.23.0 None 0 1.89 MB nicolo-ribaudo
npm/@babel/plugin-syntax-jsx@7.22.5 None +1 16 kB nicolo-ribaudo
npm/@babel/plugin-syntax-typescript@7.22.5 None 0 6.86 kB nicolo-ribaudo
npm/@babel/plugin-transform-modules-commonjs@7.23.0 None +3 225 kB nicolo-ribaudo
npm/@babel/plugin-transform-runtime@7.17.0 unsafe 0 14 kB nicolo-ribaudo
npm/@babel/plugin-transform-typescript@7.22.15 None 0 130 kB nicolo-ribaudo
npm/@babel/preset-typescript@7.23.2 None 0 21.5 kB nicolo-ribaudo
npm/@babel/runtime@7.24.5 None 0 262 kB nicolo-ribaudo
npm/@babel/traverse@7.23.2 None +3 1.11 MB nicolo-ribaudo
npm/@babel/types@7.23.0 environment +1 2.44 MB nicolo-ribaudo
npm/@blocto/dappauth@2.1.0 None 0 20.1 kB scottphc
npm/@cedelabs/providers@1.5.0 Transitive: environment +1 9.96 MB cedelabs
npm/@celo/base@3.2.0 None 0 210 kB alecps
npm/@celo/utils@3.2.0 None +9 1.84 MB alecps
npm/@chainsafe/as-sha256@0.3.1 None 0 165 kB dapplion
npm/@chainsafe/persistent-merkle-tree@0.4.2 None 0 112 kB dapplion
npm/@chainsafe/ssz@0.9.4 None 0 468 kB dapplion
npm/@coinbase/wallet-sdk@3.9.1 network +2 1.28 MB jungho.bang
npm/@cspotcode/source-map-consumer@0.8.0 filesystem 0 133 kB cspotcode
npm/@cspotcode/source-map-support@0.7.0 filesystem 0 43.5 kB cspotcode
npm/@discoveryjs/json-ext@0.5.6 None 0 83.3 kB lahmatiy
npm/@emotion/babel-plugin@11.11.0 environment Transitive: filesystem +4 226 kB emotion-release-bot
npm/@emotion/cache@11.11.0 environment +4 189 kB emotion-release-bot
npm/@emotion/is-prop-valid@1.2.1 environment +1 33.4 kB emotion-release-bot
npm/@emotion/react@11.11.4 environment +6 688 kB emotion-release-bot
npm/@emotion/serialize@1.1.2 environment +3 91.4 kB emotion-release-bot
npm/@emotion/styled@11.11.5 environment +5 246 kB emotion-release-bot
npm/@emotion/unitless@0.8.1 environment 0 7.05 kB emotion-release-bot
npm/@esbuild/android-arm@0.18.20 None 0 11.1 MB evanw
npm/@esbuild/android-arm64@0.18.20 None 0 9.57 MB evanw
npm/@esbuild/android-x64@0.18.20 None 0 11.1 MB evanw
npm/@esbuild/darwin-arm64@0.18.20 None 0 9.51 MB evanw
npm/@esbuild/darwin-x64@0.18.20 None 0 9.92 MB evanw
npm/@esbuild/freebsd-arm64@0.18.20 None 0 8.65 MB evanw
npm/@esbuild/freebsd-x64@0.18.20 None 0 9.35 MB evanw
npm/@esbuild/linux-arm@0.18.20 None 0 8.85 MB evanw
npm/@esbuild/linux-arm64@0.18.20 None 0 8.65 MB evanw
npm/@esbuild/linux-ia32@0.18.20 None 0 8.9 MB evanw
npm/@esbuild/linux-loong64@0.18.20 None 0 9.11 MB evanw
npm/@esbuild/linux-mips64el@0.18.20 None 0 10.2 MB evanw
npm/@esbuild/linux-ppc64@0.18.20 None 0 8.91 MB evanw
npm/@esbuild/linux-riscv64@0.18.20 None 0 8.85 MB evanw
npm/@esbuild/linux-s390x@0.18.20 None 0 9.77 MB evanw
npm/@esbuild/linux-x64@0.18.20 None 0 9.35 MB evanw
npm/@esbuild/netbsd-x64@0.18.20 None 0 9.33 MB evanw
npm/@esbuild/openbsd-x64@0.18.20 None 0 9.37 MB evanw
npm/@esbuild/sunos-x64@0.18.20 None 0 9.33 MB evanw
npm/@esbuild/win32-arm64@0.18.20 None 0 8.76 MB evanw
npm/@esbuild/win32-ia32@0.18.20 None 0 9.2 MB evanw
npm/@esbuild/win32-x64@0.18.20 None 0 9.55 MB evanw
npm/@eslint/eslintrc@0.4.3 filesystem, unsafe +1 204 kB eslintbot
npm/@ethereumjs/common@2.5.0 None +2 2.9 MB holgerd77
npm/@ethereumjs/tx@3.3.2 None 0 384 kB holgerd77
npm/@ethereumjs/util@8.0.6 None +8 3.3 MB holgerd77
npm/@ethersproject/abi@5.7.0 None 0 498 kB ricmoo
npm/@formatjs/ecma402-abstract@1.11.3 None +1 313 kB longlho
npm/@formatjs/icu-messageformat-parser@2.0.18 None +1 214 kB longlho
npm/@gsap/react@2.1.0 None 0 18.7 kB greensock
npm/@humanwhocodes/config-array@0.5.0 None +1 84.3 kB nzakas
npm/@ioredis/commands@1.2.0 None 0 55.6 kB ioredis-robot
npm/@jridgewell/gen-mapping@0.3.3 None +1 94.7 kB jridgewell
npm/@jridgewell/resolve-uri@3.1.1 None 0 55.2 kB jridgewell
npm/@jridgewell/trace-mapping@0.3.19 None 0 164 kB jridgewell
npm/@keepkey/device-protocol@7.7.0 None 0 1.89 MB mcchadwick
npm/@lit-labs/ssr-dom-shim@1.1.0 None 0 32.5 kB lit-robot
npm/@lit/reactive-element@1.6.1 None 0 785 kB lit-robot
npm/@magic-sdk/commons@4.1.0 None 0 12.1 kB smithki
npm/@magic-sdk/provider@28.0.5 environment Transitive: network +13 2.09 MB magiclabs_fe
npm/@magic-sdk/types@24.0.4 None 0 140 kB magiclabs_fe
npm/@metamask/eth-json-rpc-middleware@12.1.0 network +5 271 kB metamaskbot
npm/@metamask/object-multiplex@1.2.0 Transitive: environment +3 149 kB gudahtt
npm/@metamask/post-message-stream@6.2.0 Transitive: environment +3 178 kB gudahtt
npm/@metamask/sdk-communication-layer@0.14.3 environment, filesystem +2 12.5 MB metamaskbot
npm/@metamask/sdk-install-modal-web@0.14.1 environment 0 8.27 MB metamaskbot
npm/@metamask/sdk@0.14.3 Transitive: environment, network +10 29.2 MB metamaskbot
npm/@motionone/animation@10.15.1 None +3 95.1 kB popmotion
npm/@motionone/dom@10.16.2 None +3 568 kB popmotion
npm/@motionone/svelte@10.16.2 None 0 263 kB popmotion
npm/@motionone/vue@10.16.2 None 0 819 kB popmotion
npm/@myetherwallet/mewconnect-web-client@2.2.0-beta.16 Transitive: environment, eval, filesystem, network, shell +46 18.2 MB kvhnuke
npm/@ngraveio/bc-ur@1.1.6 None 0 114 kB antwnic4
npm/@niceties/logger@1.1.3 None 0 40.7 kB kshutkin
npm/@noble/ed25519@1.7.1 None 0 84 kB paulmillr
npm/@noble/secp256k1@1.6.3 None 0 106 kB paulmillr
npm/@nothing-but/utils@0.3.2 None 0 104 kB thetarnav.
npm/@parcel/watcher-android-arm64@2.3.0 None 0 406 kB devongovett
npm/@parcel/watcher-darwin-arm64@2.3.0 None 0 328 kB devongovett
npm/@parcel/watcher-darwin-x64@2.3.0 None 0 327 kB devongovett
npm/@parcel/watcher-freebsd-x64@2.3.0 None 0 551 kB devongovett
npm/@parcel/watcher-linux-arm-glibc@2.3.0 None 0 436 kB devongovett
npm/@parcel/watcher-linux-arm64-glibc@2.3.0 None 0 455 kB devongovett
npm/@parcel/watcher-linux-arm64-musl@2.3.0 None 0 463 kB devongovett
npm/@parcel/watcher-linux-x64-glibc@2.3.0 None 0 546 kB devongovett
npm/@parcel/watcher-linux-x64-musl@2.3.0 None 0 509 kB devongovett
npm/@parcel/watcher-wasm@2.3.0 filesystem 0 218 kB devongovett
npm/@parcel/watcher-win32-arm64@2.3.0 None 0 533 kB devongovett
npm/@parcel/watcher-win32-ia32@2.3.0 None 0 431 kB devongovett
npm/@parcel/watcher-win32-x64@2.3.0 None 0 533 kB devongovett
npm/@parcel/watcher@2.3.0 None +1 412 kB devongovett
npm/@ramp-network/ramp-instant-sdk@4.0.4 None 0 350 kB jakubsta
npm/@rollup-extras/plugin-copy@1.2.2 filesystem Transitive: environment, unsafe +3 6.74 MB kshutkin
npm/@rollup/plugin-json@4.1.0 None 0 15.7 kB shellscape
npm/@rollup/plugin-node-resolve@11.2.1 filesystem +1 95 kB shellscape
npm/@rollup/plugin-typescript@11.1.6 environment, filesystem +2 310 kB shellscape
npm/@safe-global/safe-apps-provider@0.18.1 None 0 33.5 kB dasanra
npm/@shapeshiftoss/hdwallet-core@1.18.4 None +1 234 kB shapeshift-ci-bot
npm/@shapeshiftoss/hdwallet-keepkey-webusb@1.18.4 None 0 21.5 kB shapeshift-ci-bot
npm/@shapeshiftoss/hdwallet-keepkey@1.18.4 None 0 329 kB shapeshift-ci-bot
npm/@sideway/address@4.1.4 None 0 56.4 kB hueniverse
npm/@solid-devtools/debugger@0.22.4 None +13 550 kB thetarnav.
npm/@solid-primitives/event-listener@2.3.0 None 0 49.8 kB thetarnav.
npm/@solid-primitives/rootless@1.4.2 None 0 28.4 kB thetarnav.
npm/@solid-primitives/utils@6.2.1 None 0 54 kB thetarnav.
npm/@stencil/core@4.16.0 None 0 52 MB ionicjs
npm/@tanstack/query-core@5.29.0 environment 0 1.86 MB tannerlinsley
npm/@tanstack/react-query@5.29.2 environment 0 1.95 MB tannerlinsley
npm/@toruslabs/base-controllers@2.8.0 network +7 8.66 MB chaitanyapotti
npm/@toruslabs/http-helpers@3.3.0 network 0 239 kB chaitanyapotti
npm/@trezor/analytics@1.0.5 network Transitive: environment +2 68.3 kB trezor-ci
npm/@trezor/blockchain-link-types@1.0.4 None 0 51.9 kB trezor-ci
npm/@trezor/blockchain-link-utils@1.0.5 None +1 77 kB trezor-ci
npm/@trezor/blockchain-link@2.1.15 None +4 1.79 MB trezor-ci
npm/@trezor/connect-analytics@1.0.4 environment 0 4.95 kB trezor-ci
npm/@trezor/connect-common@0.0.18 Transitive: environment +1 168 kB trezor-ci
npm/@trezor/connect-web@9.1.1 Transitive: environment, filesystem, network, unsafe +10 13.3 MB trezor-ci
npm/@tsconfig/node10@1.0.8 None 0 2.31 kB typescript-deploys
npm/@tsconfig/node12@1.0.9 None 0 2.4 kB typescript-deploys
npm/@tsconfig/node14@1.0.1 None 0 2.29 kB typescript-deploys
npm/@tsconfig/node16@1.0.2 None 0 2.29 kB typescript-deploys
npm/@tsconfig/svelte@2.0.1 None 0 3.11 kB typescript-deploys
npm/@types/body-parser@1.19.2 None 0 8.3 kB types
npm/@types/bonjour@3.5.10 None 0 5.81 kB types
npm/@types/connect-history-api-fallback@1.3.5 None 0 5.41 kB types
npm/@types/connect@3.4.35 None 0 6.14 kB types
npm/@types/crypto-js@4.2.2 None 0 60.4 kB types
npm/@types/eslint-scope@3.7.3 None +1 169 kB types
npm/@types/express-serve-static-core@4.17.28 None +2 93.3 kB types
npm/@types/express@4.17.13 None +3 31.3 kB types
npm/@types/glob@7.2.0 None +1 14.8 kB types
npm/@types/http-proxy@1.17.8 None 0 12.8 kB types
npm/@types/istanbul-lib-coverage@2.0.4 None 0 5.76 kB types
npm/@types/json-schema@7.0.9 None 0 32.2 kB types
npm/@types/lodash.merge@4.6.6 None 0 3.3 kB types
npm/@types/lodash.partition@4.6.6 None 0 3.34 kB types
npm/@types/lodash.uniqby@4.7.6 None 0 3.31 kB types
npm/@types/lodash@4.14.194 None 0 863 kB types
npm/@types/node@18.15.13 None 0 3.65 MB types
npm/@types/prop-types@15.7.4 None 0 6.55 kB types
npm/@types/pug@2.0.6 None 0 9.86 kB types
npm/@types/react@18.0.9 None +1 183 kB types
npm/@types/retry@0.12.1 None 0 7.87 kB types
npm/@types/sass@1.43.1 None 0 13.1 kB types
npm/@types/secp256k1@4.0.3 None 0 8.05 kB types
npm/@types/serve-index@1.9.1 None 0 5.19 kB types
npm/@types/sockjs@0.3.33 None 0 5.84 kB types
npm/@types/stylis@4.2.0 None 0 7.25 kB types
npm/@types/trusted-types@2.0.3 None 0 8.97 kB types
npm/@types/use-sync-external-store@0.0.3 None 0 3.61 kB types
npm/@typescript-eslint/eslint-plugin@4.33.0 Transitive: environment, filesystem +9 4.55 MB jameshenry
npm/@typescript-eslint/parser@4.33.0 Transitive: environment, filesystem +4 1.32 MB jameshenry
npm/@uauth/js@2.4.0 network 0 298 kB braden-pezeshki
npm/@unstoppabledomains/resolution@8.3.3 None 0 446 kB unstoppable_sam
npm/@usecapsule/core-components@2.0.9 None 0 13.7 MB vtig2020
npm/@usecapsule/core-sdk@1.11.1 network Transitive: eval +8 746 kB tbosch
npm/@usecapsule/react-components@2.0.9 None 0 73.6 kB vtig2020
npm/@usecapsule/react-sdk@3.7.1 Transitive: environment, eval, network +12 2.83 MB tbosch
npm/@usecapsule/viem-v2-integration@1.10.1 None 0 10.7 kB tbosch
npm/@usecapsule/wagmi-v2-integration@2.8.1 None 0 35.2 kB tbosch
npm/@venly/connect@2.5.0 network +1 1.26 MB venly_io
npm/@vue/compiler-core@3.2.31 environment, eval +2 1.59 MB yyx990803
npm/@vue/compiler-dom@3.2.31 environment, eval +1 824 kB yyx990803
npm/@vue/compiler-sfc@3.2.31 environment, eval, filesystem, unsafe +3 2.21 MB yyx990803
npm/@vue/reactivity@3.2.31 environment +1 333 kB yyx990803
npm/@vue/runtime-core@3.2.31 environment +1 1.03 MB yyx990803
npm/@vue/runtime-dom@3.2.31 environment +2 3.26 MB yyx990803
npm/@vue/server-renderer@3.2.31 environment, eval +3 2.77 MB yyx990803
npm/@vueuse/core@8.4.2 network +2 1.1 MB antfu
npm/@vueuse/rxjs@8.2.0 None +1 191 kB antfu
npm/@wagmi/chains@1.2.0 None 0 240 kB jmoxey
npm/@wagmi/connectors@5.0.10 Transitive: environment +11 37 MB awkweb
npm/@wagmi/core@2.10.5 Transitive: environment +1 2.08 MB awkweb
npm/@walletconnect/core@2.13.0 environment, network +2 2.84 MB gancho_walletconnect
npm/@walletconnect/ethereum-provider@2.13.0 None 0 3.48 MB gancho_walletconnect
npm/0xsequence@0.43.1 environment Transitive: network +15 2.89 MB pkieltyka
npm/css-loader@6.11.0 Transitive: environment, filesystem +7 639 kB evilebottnawi
npm/style-loader@3.3.4 None 0 83.5 kB evilebottnawi
npm/webpack-cli@5.1.4 environment, filesystem, unsafe Transitive: shell +11 376 kB evilebottnawi
npm/webpack-dev-server@4.15.2 environment, eval, network Transitive: filesystem, shell, unsafe +21 2.69 MB evilebottnawi

🚮 Removed packages: npm/@algolia/client-search@4.23.3, npm/@antfu/utils@0.7.8, npm/@babel/code-frame@7.24.2, npm/@babel/compat-data@7.24.4, npm/@babel/helper-compilation-targets@7.23.6, npm/@babel/helper-define-polyfill-provider@0.6.2, npm/@babel/helper-plugin-utils@7.24.5, npm/@babel/parser@7.24.5, npm/@babel/runtime@7.24.6, npm/@babel/template@7.24.0, npm/@babel/types@7.24.5, npm/@cosmjs/amino@0.29.5, npm/@cosmjs/crypto@0.29.4, npm/@cosmjs/encoding@0.29.5, npm/@cosmjs/math@0.29.5, npm/@cosmjs/proto-signing@0.29.5, npm/@cosmjs/stream@0.29.5, npm/@cosmjs/tendermint-rpc@0.29.5, npm/@cosmjs/utils@0.29.5, npm/@docsearch/css@3.6.0, npm/@docsearch/js@3.6.0, npm/@ethereumjs/common@2.6.5, npm/@ethereumjs/tx@3.5.2, npm/@ethersproject/abi@5.5.0, npm/@ethersproject/basex@5.7.0, npm/@ethersproject/providers@5.7.2, npm/@ethersproject/random@5.7.0, npm/@ethersproject/sha2@5.7.0, npm/@iconify-json/ri@1.1.20, npm/@iconify/types@2.0.0, npm/@lit-labs/ssr-dom-shim@1.2.0, npm/@lit/reactive-element@1.6.3, npm/@motionone/animation@10.17.0, npm/@motionone/dom@10.17.0, npm/@motionone/types@10.17.0, npm/@motionone/utils@10.17.0, npm/@ngraveio/bc-ur@1.1.13, npm/@safe-global/safe-apps-provider@0.18.2, npm/@shapeshiftoss/hdwallet-core@1.54.0, npm/@sveltejs/adapter-static@2.0.3, npm/@sveltejs/kit@1.30.4, npm/@svelteness/kit-docs@1.1.5, npm/@tailwindcss/typography@0.5.13, npm/@toruslabs/base-controllers@2.9.0, npm/@toruslabs/eccrypto@2.2.1, npm/@types/animejs@3.1.12, npm/@types/bn.js@5.1.1, npm/@types/node@20.12.13, npm/@types/react@18.3.2, npm/@types/secp256k1@4.0.6, npm/@vitejs/plugin-react@4.2.1, npm/@walletconnect/encoding@1.0.2, npm/@walletconnect/relay-api@1.0.10, npm/@walletconnect/relay-auth@1.0.4, npm/@walletconnect/time@1.0.2, npm/@walletconnect/window-getters@1.0.1, npm/@walletconnect/window-metadata@1.0.1, npm/@web3-onboard/bitget@2.1.1, npm/@web3-onboard/blocto@2.1.1, npm/@web3-onboard/cede-store@2.3.1, npm/@web3-onboard/common@2.4.2, npm/@web3-onboard/dcent@2.2.9, npm/@web3-onboard/enkrypt@2.1.1, npm/@web3-onboard/fortmatic@2.1.1, npm/@web3-onboard/frame@2.1.1, npm/@web3-onboard/frontier@2.1.1, npm/@web3-onboard/gas@2.2.1, npm/@web3-onboard/gnosis@2.3.1, npm/@web3-onboard/infinity-wallet@2.1.1, npm/@web3-onboard/keepkey@2.3.9, npm/@web3-onboard/keystone@2.3.9, npm/@web3-onboard/ledger@2.7.1, npm/@web3-onboard/magic@2.2.1, npm/@web3-onboard/metamask@2.1.1, npm/@web3-onboard/mew-wallet@2.1.1, npm/@web3-onboard/particle-network@2.1.1, npm/@web3-onboard/phantom@2.1.1, npm/@web3-onboard/portis@2.2.1, npm/@web3-onboard/sequence@2.1.1, npm/@web3-onboard/taho@2.1.1, npm/@web3-onboard/torus@2.3.1, npm/@web3-onboard/transaction-preview@2.1.1, npm/@web3-onboard/trezor@2.4.5, npm/@web3-onboard/trust@2.1.1, npm/@web3-onboard/uauth@2.2.1, npm/@web3-onboard/venly@2.1.1, npm/@web3-onboard/web3auth@2.3.1, npm/@web3-onboard/xdefi@2.1.1, npm/@web3-onboard/zeal@2.1.1, npm/@web3auth/base@5.2.0, npm/agent-base@6.0.2, npm/animejs@3.2.2, npm/ansi-styles@3.2.1, npm/anymatch@3.1.3, npm/assert-plus@1.0.0, npm/async@2.6.4, npm/autoprefixer@10.4.19, npm/axios@0.21.4, npm/base64-js@1.5.1, npm/bech32@1.1.4, npm/big-integer@1.6.52, npm/bignumber.js@9.1.2, npm/bindings@1.5.0, npm/bip32@2.0.6, npm/bip66@1.1.5, npm/bitcoin-ops@1.4.1, npm/bnc-sdk@4.6.9, npm/bowser@2.11.0, npm/braces@3.0.3, npm/brorand@1.1.0, npm/browserify-aes@1.2.0, npm/browserify-rsa@4.1.0, npm/browserify-zlib@0.2.0, npm/browserslist@4.23.0, npm/bs58check@2.1.2, npm/buffer@6.0.3, npm/camelcase@5.3.1, npm/caniuse-lite@1.0.30001620, npm/chokidar@3.6.0, npm/cipher-base@1.0.4, npm/citty@0.1.6, npm/clone@2.1.2, npm/clsx@1.2.1, npm/combined-stream@1.0.8, npm/copy-to-clipboard@3.3.3, npm/cosmjs-types@0.5.2, npm/create-hash@1.2.0, npm/create-hmac@1.1.7, npm/crossws@0.2.4, npm/crypto-browserify@3.12.0, npm/crypto-js@4.2.0, npm/d@1.0.2, npm/debug@4.3.4, npm/decode-uri-component@0.2.2, npm/deepmerge@4.3.1, npm/define-data-property@1.1.4, npm/defu@6.1.4, npm/detect-browser@5.3.0, npm/duplexify@4.1.3, npm/elliptic@6.5.4, npm/end-of-stream@1.4.4, npm/es5-ext@0.10.64, npm/es6-promise@4.2.8, npm/es6-symbol@3.1.4, npm/escalade@3.1.2, npm/estree-walker@2.0.2

View full report↗︎

socket-security[bot] commented 3 months ago

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/secp256k1@3.8.0
  • Install script: install
  • Source: npm run rebuild || echo "Secp256k1 bindings compilation fail. Pure JS implementation will be used."
Install scripts npm/web3@1.5.0
  • Install script: postinstall
  • Source: echo "WARNING: the web3-shh and web3-bzz api will be deprecated in the next version"
Install scripts npm/web3-bzz@1.5.0
  • Install script: postinstall
  • Source: echo "WARNING: the web3-bzz api will be deprecated in the next version"
Install scripts npm/web3-shh@1.5.0
  • Install script: postinstall
  • Source: echo "WARNING: the web3-shh api will be deprecated in the next version"
Install scripts npm/bigint-buffer@1.1.5
  • Install script: install
  • Source: npm run rebuild || echo "Couldn't build bindings. Non-native version used."
Install scripts npm/secp256k1@3.7.1
  • Install script: install
  • Source: npm run rebuild || echo "Secp256k1 bindings compilation fail. Pure JS implementation will be used."
Install scripts npm/protobufjs@7.2.6
  • Install script: postinstall
  • Source: node scripts/postinstall
Install scripts npm/esbuild@0.19.12
Install scripts npm/@sveltejs/kit@1.30.4
  • Install script: postinstall
  • Source: node postinstall.js
Protestware/Troll package npm/es5-ext@0.10.64
  • Note: This package prints a protestware console message on install regarding Ukraine for users with Russian language locale
Install scripts npm/es5-ext@0.10.64
  • Install script: postinstall
  • Source: node -e "try{require('./_postinstall')}catch(e){}" || exit 0

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

What is protestware?

This package is a joke, parody, or includes undocumented or hidden behavior unrelated to its primary function.

Consider that consuming this package my come along with functionality unrelated to its primary purpose.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/secp256k1@3.8.0
  • @SocketSecurity ignore npm/web3@1.5.0
  • @SocketSecurity ignore npm/web3-bzz@1.5.0
  • @SocketSecurity ignore npm/web3-shh@1.5.0
  • @SocketSecurity ignore npm/bigint-buffer@1.1.5
  • @SocketSecurity ignore npm/secp256k1@3.7.1
  • @SocketSecurity ignore npm/protobufjs@7.2.6
  • @SocketSecurity ignore npm/esbuild@0.19.12
  • @SocketSecurity ignore npm/@sveltejs/kit@1.30.4
  • @SocketSecurity ignore npm/es5-ext@0.10.64