Closed ChefMomota closed 1 week ago
vercel[bot]
commented
3 weeks ago The latest updates on your projects. Learn more about Vercel for Git ↗︎
| Name | Status | Preview | Comments | Updated (UTC) |
|---|---|---|---|---|
| aptos-web | ✅ Ready (Inspect) | Visit Preview | 💬 Add feedback | Nov 20, 2024 4:55am |
changeset-bot[bot]
commented
3 weeks ago Latest commit: 8efa8e6a1e6846b05facc50376a6be09ab93f0b5
The changes in this PR will be included in the next version bump.
Not sure what this means? Click here to learn what changesets are.
Click here if you're a maintainer who wants to add another changeset to this PR
socket-security[bot]
commented
3 weeks ago 🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎
To accept the risk, merge this PR and you will not be notified again.
| Alert | Package | Note | Source | CI |
|---|---|---|---|---|
| Environment variable access | npm/@testing-library/react@12.1.5 |
| 🚫 | |
| Environment variable access | npm/@testing-library/dom@8.20.1 |
| 🚫 | |
| Environment variable access | npm/@testing-library/dom@8.20.1 |
| 🚫 | |
| Environment variable access | npm/@testing-library/react@13.4.0 |
| 🚫 | |
| Environment variable access | npm/@tinyhttp/app@1.3.0 |
| 🚫 | |
| Filesystem access | npm/@tinyhttp/etag@1.3.0 |
| 🚫 | |
| Filesystem access | npm/@tinyhttp/send@1.3.0 |
| 🚫 |
Package accesses environment variables, which may be a sign of credential stuffing or data theft.
Packages should be clear about which environment variables they access, and care should be taken to ensure they only access environment variables they claim to.
Accesses the file system, and could potentially read sensitive data.
If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.
Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.
If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all
@SocketSecurity ignore npm/@testing-library/react@12.1.5@SocketSecurity ignore npm/@testing-library/dom@8.20.1@SocketSecurity ignore npm/@testing-library/react@13.4.0@SocketSecurity ignore npm/@tinyhttp/app@1.3.0@SocketSecurity ignore npm/@tinyhttp/etag@1.3.0@SocketSecurity ignore npm/@tinyhttp/send@1.3.0socket-security[bot]
commented
2 weeks ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@testing-library/jest-dom@5.17.0 | None | +2 |
550 kB | testing-library-bot |
| npm/@testing-library/react-hooks@8.0.1 | None | +1 |
385 kB | testing-library-bot |
| npm/@testing-library/react@12.1.5 | environment | +5 |
7.75 MB | testing-library-bot |
| npm/@testing-library/react@13.4.0 | environment | +5 |
7.28 MB | testing-library-bot |
🚮 Removed packages: npm/react-redux@8.1.3
ChefMomota
commented
1 week ago we need to bump the major version once updated
PR-Codex overview
This PR focuses on enhancing the
stable-swap-sdkby removing old pool constants, integrating an API for stable swap data, and updating various components to use this new data structure, improving overall functionality and stability.Detailed summary
arb.ts,bsc.ts,eth.ts,bscTestnet.ts,pools.test.ts).STABLE_SWAP_APIinendpoint.tsfor fetching stable swap data.fetchStableSwapDatafunction to retrieve stable swap pools.getStableSwapPoolsto use the new API.getStableSwapPairsandfetchStableSwapData.@pancakeswap/sdkand other relevant packages.