Gathering detailed insights and metrics for @0x/dev-utils
Gathering detailed insights and metrics for @0x/dev-utils
Installations
npm install @0x/dev-utilsDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Min. Node Version
>=6.12
Node Version
16.20.0
NPM Version
lerna/3.16.10/node@v16.20.0+x64 (linux)
Score
40.6
Supply Chain
82.9
Quality
74.4
Maintenance
50
Vulnerability
88.3
License
Releases
48
tools - bee0702
tools@bee0702
Published on 07 Apr 2023
tools - c33f74a
tools@c33f74a
Published on 07 Apr 2023
tools - 8c79268
tools@8c79268
Published on 26 Jan 2023
tools - 38f717a
tools@38f717a
Published on 13 Oct 2022
tools - aad2bd4
tools@aad2bd4
Published on 18 Aug 2022
tools - 0787b82
tools@0787b82
Published on 16 Mar 2022
Contributors
86
Unable to fetch Contributors
Languages
7
TypeScript
MDX
Python
JavaScript
Handlebars
Solidity
Dockerfile
TypeScript (65.97%)
MDX (23.63%)
Python (4.88%)
JavaScript (2.83%)
Handlebars (1.59%)
Solidity (1.1%)
Developer
0xProject
Download Statistics
Total Downloads
888,938
Last Day
7
Last Week
234
Last Month
1,543
Last Year
40,326
GitHub Statistics
100 Stars
16,563 Commits
67 Forks
9 Watching
44 Branches
86 Contributors
Maintainers
14
Package Meta Information
Latest Version
5.0.3
Package Id
@0x/dev-utils@5.0.3
Unpacked Size
78.11 kB
Size
18.30 kB
File Count
41
NPM Version
lerna/3.16.10/node@v16.20.0+x64 (linux)
Node Version
16.20.0
Publised On
07 Apr 2023
Total Downloads
Cumulative downloads
Total Downloads
888,938
Last day
-94.6%
7
Compared to previous day
Last week
-55.4%
234
Compared to previous week
Last month
-45.6%
1,543
Compared to previous month
Last year
-61.8%
40,326
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
14
Versions
Dev utils
Dev utils to be shared across 0x projects and packages
Configuration
Some env variables might be set to change the behaviour of created web3 providers/instances.
VERBOSE_GANACHE: boolean. Enables verbose Ganache logging. Every request/response payload. Slightly slower, but useful for testing.
SOLIDITY_COVERAGE: boolean. If set - adds coverage subprovider which intercepts all calls/transactions and can be later used to compute code coverage.
Boolean env variables should be either true or false. Defaults to false if not set.
Install
1yarn add @0x/dev-utils
If your project is in TypeScript, add the following to your tsconfig.json:
1"compilerOptions": { 2 "typeRoots": ["node_modules/@0x/typescript-typings/types", "node_modules/@types"], 3}
Troubleshooting
If you are still seeing TS type errors complaining about missing DOM types such as Response:
error TS2304: Cannot find name 'Response'.
Then you need to explicitly add the dom lib to your compiler options in tsconfig.json. The dom library is included by default, but customizing the lib option can cause it to be dropped.
"compilerOptions": {
"lib": [..., "dom"],
Contributing
We welcome improvements and fixes from the wider community! To report bugs within this package, please create an issue in this repository.
Please read our contribution guidelines before getting started.
Install dependencies
If you don't have yarn workspaces enabled (Yarn < v1.0) - enable them:
1yarn config set workspaces-experimental true
Then install dependencies
1yarn install
Build
To build this package and all other monorepo packages that it depends on, run the following from the monorepo root directory:
1PKG=@0x/dev-utils yarn build
Or continuously rebuild on change:
1PKG=@0x/dev-utils yarn watch
Clean
1yarn clean
Lint
1yarn lint
Run Tests
1yarn test
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 3/11 approved changesets -- score normalized to 2
Reason
2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/publish.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: containerImage not pinned by hash: verdaccio/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio to verdaccio/verdaccio@sha256:58353ed1b53ebb3e6fc2925a5384f70a4aa3ddac7a1402d717a39951e7ab43ad
- Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 24 are checked with a SAST tool
Reason
48 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
- Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
- Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-2j2x-2gpw-g8fm
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
- Warn: Project is vulnerable to: GHSA-7wwv-vh3v-89cq
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-4xcv-9jjx-gfj3
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
- Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
- Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-584q-6j8j-r5pm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
Score
3
/10
Last Scanned on 2024-12-23
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More