Skip to content

Use Contracts for Cairo v0.10.0#344

Merged
ericglau merged 9 commits intoOpenZeppelin:masterfrom
ericglau:cairo_v0.10.0
Mar 12, 2024
Merged

Use Contracts for Cairo v0.10.0#344
ericglau merged 9 commits intoOpenZeppelin:masterfrom
ericglau:cairo_v0.10.0

Conversation

@ericglau
Copy link
Member

@ericglau ericglau commented Mar 12, 2024

Fixes #343

@socket-security
Copy link

socket-security bot commented Mar 12, 2024 •
edited
Loading

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@pkgjs/parseargs@0.11.0 None 0 74.2 kB oss-bot
npm/@polka/url@1.0.0-next.24 None 0 4.38 kB lukeed
npm/@popperjs/core@2.11.8 None 0 1.46 MB fezvrasta
npm/@rollup/plugin-alias@5.1.0 Transitive: environment, filesystem, unsafe +3 6.9 MB shellscape
npm/@rollup/plugin-commonjs@25.0.7 filesystem Transitive: environment, unsafe +18 7.92 MB shellscape
npm/@rollup/plugin-json@6.1.0 Transitive: environment, filesystem, unsafe +6 7.11 MB shellscape
npm/@rollup/plugin-node-resolve@15.2.3 filesystem Transitive: environment, unsafe +17 7.49 MB shellscape
npm/@rollup/plugin-replace@5.0.5 Transitive: environment, filesystem, unsafe +8 7.62 MB shellscape
npm/@rollup/plugin-typescript@11.1.6 environment, filesystem Transitive: unsafe +14 39.9 MB shellscape
npm/@rollup/pluginutils@5.1.0 Transitive: environment, filesystem, unsafe +5 7.1 MB shellscape
npm/@rollup/rollup-android-arm-eabi@4.12.0 None 0 1.63 MB lukastaegert
npm/@rollup/rollup-android-arm64@4.12.0 None 0 2.49 MB lukastaegert
npm/@rollup/rollup-darwin-arm64@4.12.0 None 0 2.41 MB lukastaegert
npm/@rollup/rollup-darwin-x64@4.12.0 None 0 2.58 MB lukastaegert
npm/@rollup/rollup-linux-arm-gnueabihf@4.12.0 None 0 2.43 MB lukastaegert
npm/@rollup/rollup-linux-arm64-gnu@4.12.0 None 0 2.47 MB lukastaegert
npm/@rollup/rollup-linux-arm64-musl@4.12.0 None 0 2.37 MB lukastaegert
npm/@rollup/rollup-linux-riscv64-gnu@4.12.0 None 0 2.54 MB lukastaegert
npm/@rollup/rollup-linux-x64-gnu@4.12.0 None 0 2.73 MB lukastaegert
npm/@rollup/rollup-linux-x64-musl@4.12.0 None 0 2.73 MB lukastaegert
npm/@rollup/rollup-win32-arm64-msvc@4.12.0 None 0 2.93 MB lukastaegert
npm/@rollup/rollup-win32-ia32-msvc@4.12.0 None 0 2.64 MB lukastaegert
npm/@rollup/rollup-win32-x64-msvc@4.12.0 None 0 3.44 MB lukastaegert
npm/@sindresorhus/merge-streams@2.3.0 None 0 10.5 kB sindresorhus
npm/@trysound/sax@0.2.0 None 0 48.8 kB trysound
npm/@types/cssnano@5.1.0 Transitive: environment, filesystem, network, shell, unsafe +68 10.4 MB types
npm/@types/estree@1.0.5 None 0 25.7 kB types
npm/@types/file-saver@2.0.7 None 0 6.31 kB types
npm/@types/parse-json@4.0.2 None 0 2.95 kB types
npm/@types/pug@2.0.10 None 0 9.7 kB types
npm/@types/resize-observer-browser@0.1.11 None 0 5.44 kB types
npm/@types/semver@7.5.8 None 0 23.3 kB types
npm/@types/uuid@9.0.8 None 0 6.74 kB types
npm/@vercel/nft@0.26.4 environment, eval, unsafe Transitive: filesystem, network, shell +70 2.99 MB vercel-release-bot
npm/any-promise@1.3.0 None 0 22.2 kB kevinbeaty
npm/array-find-index@1.0.2 None 0 2.88 kB sindresorhus
npm/array.prototype.flat@1.3.2 Transitive: eval +60 3.32 MB ljharb
npm/array.prototype.flatmap@1.3.2 Transitive: eval +60 3.32 MB ljharb
npm/arrgv@1.0.2 None 0 9.07 kB astur
npm/arrify@3.0.0 None 0 3.5 kB sindresorhus
npm/autoprefixer@10.4.18 environment Transitive: filesystem, shell +13 3.07 MB ai
npm/ava@6.1.2 Transitive: environment, eval, filesystem, network, shell, unsafe +164 7.66 MB novemberborn
npm/browserslist@4.23.0 environment, filesystem Transitive: shell +6 2.38 MB ai
npm/buffer-crc32@0.2.13 None 0 7.95 kB brianloveswords
npm/callsites@4.1.0 None 0 6.53 kB sindresorhus
npm/camelcase-css@2.0.1 None 0 4.05 kB stevenvachon
npm/caniuse-lite@1.0.30001591 None 0 1.97 MB caniuse-lite
npm/ci-info@4.0.0 environment 0 27.3 kB sibiraj-s
npm/colord@2.9.3 None 0 114 kB omgovich
npm/commander@7.2.0 filesystem, shell 0 145 kB abetomo
npm/console-clear@1.1.1 None 0 2.46 kB lukeed
npm/cosmiconfig@7.1.0 filesystem Transitive: environment, unsafe +23 794 kB d-fischer
npm/css-declaration-sorter@7.1.1 Transitive: environment, filesystem +4 471 kB siilwyn
npm/css-select@5.1.0 Transitive: network +8 1.02 MB feedic
npm/css-tree@2.3.1 unsafe +2 1.94 MB lahmatiy
npm/css-what@6.1.0 None 0 66 kB feedic
npm/cssnano-preset-default@6.0.5 Transitive: environment, filesystem, network, shell, unsafe +65 10.4 MB ludovicofischer
npm/cssnano-utils@4.0.1 Transitive: environment, filesystem +4 381 kB ludovicofischer
npm/cssnano@6.0.5 Transitive: environment, filesystem, network, shell, unsafe +67 10.4 MB ludovicofischer
npm/csso@5.0.5 unsafe +3 2.5 MB lahmatiy
npm/decode-uri-component@0.2.2 None 0 6.09 kB samverschueren
npm/detect-indent@6.1.0 None 0 9.68 kB sindresorhus
npm/didyoumean@1.2.2 None 0 17.3 kB dcporter
npm/dlv@1.1.3 None 0 5.8 kB developit
npm/dom-serializer@2.0.0 None +3 528 kB feedic
npm/domelementtype@2.3.0 None 0 11.4 kB feedic
npm/domhandler@5.0.3 None +1 86.7 kB feedic
npm/domutils@3.1.0 network +4 690 kB feedic
npm/entities@4.5.0 None 0 413 kB feedic
npm/es6-promise@3.3.1 eval 0 173 kB stefanpenner
npm/estree-walker@2.0.2 None 0 50.2 kB rich_harris
npm/eventemitter3@4.0.7 None 0 38 kB lpinca
npm/file-saver@2.0.5 None 0 36 kB endless
npm/filter-obj@1.1.0 None 0 2.95 kB sindresorhus
npm/foreground-child@3.1.1 shell Transitive: environment, filesystem +7 189 kB isaacs
npm/highlight.js@11.9.0 None 0 5.29 MB highlightjs_bot
npm/highlightjs-cairo@0.4.0 None 0 10.5 kB ericglau
npm/highlightjs-solidity@2.0.6 None 0 42 kB haltman
npm/icss-utils@5.1.0 Transitive: environment, filesystem +4 386 kB evilebottnawi
npm/immediate@3.0.6 None 0 14.6 kB cwmma
npm/is-arguments@1.1.1 Transitive: eval +13 278 kB ljharb
npm/is-generator-function@1.0.10 eval +2 70.1 kB ljharb
npm/jackspeak@2.3.6 environment +14 601 kB isaacs
npm/jest-worker@26.6.2 environment, shell +3 4.15 MB simenb
npm/jiti@1.21.0 environment, filesystem, unsafe 0 1.91 MB pi0
npm/jszip@3.10.1 Transitive: environment +12 1.79 MB stuk
npm/kleur@4.1.5 None 0 20.3 kB lukeed
npm/lilconfig@3.1.1 filesystem 0 17.7 kB antonk52
npm/livereload-js@3.4.1 environment, eval 0 265 kB smhg
npm/livereload@0.9.3 filesystem, network Transitive: environment, eval +18 1 MB bphogan
npm/local-access@1.1.0 environment 0 4.96 kB lukeed
npm/magic-string@0.30.7 None +1 493 kB antfu
npm/mdn-data@2.0.30 None 0 602 kB schalkneethling
npm/min-indent@1.0.1 None 0 2.97 kB thejameskyle
npm/mri@1.2.0 None 0 13.3 kB lukeed
npm/mrmime@2.0.0 None 0 32.7 kB lukeed
npm/mz@2.7.0 filesystem, network, shell +4 52 kB jongleberry
npm/normalize-url@6.1.0 None 0 21.2 kB sindresorhus
npm/object-hash@3.0.0 None 0 58.9 kB addaleax
npm/p-queue@6.6.2 None +3 79.4 kB sindresorhus
npm/path-browserify@1.0.1 None 0 54.3 kB goto-bus-stop
npm/path-scurry@1.10.1 filesystem +1 599 kB isaacs
npm/pify@2.3.0 None 0 6.02 kB sindresorhus
npm/pirates@4.0.6 unsafe 0 13.5 kB danez
npm/postcss-calc@9.0.1 Transitive: environment, filesystem +8 762 kB ludovicofischer
npm/postcss-colormin@6.0.3 Transitive: environment, filesystem, shell +15 2.95 MB ludovicofischer
npm/postcss-convert-values@6.0.4 Transitive: environment, filesystem, shell +11 2.79 MB ludovicofischer
npm/postcss-discard-comments@6.0.1 Transitive: environment, filesystem +4 386 kB ludovicofischer
npm/postcss-discard-duplicates@6.0.2 Transitive: environment, filesystem +4 382 kB ludovicofischer
npm/postcss-discard-empty@6.0.2 Transitive: environment, filesystem +4 380 kB ludovicofischer
npm/postcss-discard-overridden@6.0.1 Transitive: environment, filesystem +4 382 kB ludovicofischer
npm/postcss-import@15.1.0 Transitive: environment, filesystem +13 676 kB ryanzim
npm/postcss-js@4.0.1 Transitive: environment, filesystem +5 388 kB ai
npm/postcss-load-config@4.0.2 environment, unsafe Transitive: filesystem +26 39.6 MB ai
npm/postcss-load-config@5.0.3 environment Transitive: filesystem, unsafe +6 2.33 MB ai
npm/postcss-merge-longhand@6.0.3 Transitive: environment, filesystem, shell +15 3.06 MB ludovicofischer
npm/postcss-merge-rules@6.0.4 Transitive: environment, filesystem, shell +17 3.04 MB ludovicofischer
npm/postcss-minify-font-values@6.0.2 Transitive: environment, filesystem +5 419 kB ludovicofischer
npm/postcss-minify-gradients@6.0.2 Transitive: environment, filesystem +7 532 kB ludovicofischer
npm/postcss-minify-params@6.0.3 Transitive: environment, filesystem, shell +12 2.79 MB ludovicofischer
npm/postcss-minify-selectors@6.0.2 Transitive: environment, filesystem +7 594 kB ludovicofischer
npm/postcss-modules-extract-imports@3.0.0 Transitive: environment, filesystem +4 388 kB evilebottnawi
npm/postcss-modules-local-by-default@4.0.4 Transitive: environment, filesystem +9 644 kB evilebottnawi
npm/postcss-modules-scope@3.1.1 Transitive: environment, filesystem +7 599 kB evilebottnawi
npm/postcss-modules-values@4.0.0 Transitive: environment, filesystem +5 395 kB evilebottnawi
npm/postcss-nested@6.0.1 Transitive: environment, filesystem +7 598 kB ai
npm/postcss-normalize-charset@6.0.1 Transitive: environment, filesystem +4 380 kB ludovicofischer
npm/postcss-normalize-display-values@6.0.1 Transitive: environment, filesystem +5 408 kB ludovicofischer
npm/postcss-normalize-positions@6.0.1 Transitive: environment, filesystem +5 411 kB ludovicofischer
npm/postcss-normalize-repeat-style@6.0.1 Transitive: environment, filesystem +5 410 kB ludovicofischer
npm/postcss-normalize-string@6.0.1 Transitive: environment, filesystem +5 414 kB ludovicofischer
npm/postcss-normalize-timing-functions@6.0.1 Transitive: environment, filesystem +5 409 kB ludovicofischer
npm/postcss-normalize-unicode@6.0.3 Transitive: environment, filesystem, shell +11 2.78 MB ludovicofischer
npm/postcss-normalize-url@6.0.1 Transitive: environment, filesystem +5 413 kB ludovicofischer
npm/postcss-normalize-whitespace@6.0.1 Transitive: environment, filesystem +5 409 kB ludovicofischer
npm/postcss-ordered-values@6.0.1 Transitive: environment, filesystem +6 437 kB ludovicofischer
npm/postcss-reduce-initial@6.0.3 Transitive: environment, filesystem, shell +13 2.82 MB ludovicofischer
npm/postcss-reduce-transforms@6.0.1 Transitive: environment, filesystem +5 412 kB ludovicofischer
npm/postcss-selector-parser@6.0.15 None +2 209 kB evilebottnawi
npm/postcss-svgo@6.0.2 Transitive: environment, filesystem, network, shell, unsafe +22 7.08 MB ludovicofischer
npm/postcss-unique-selectors@6.0.2 Transitive: environment, filesystem +7 589 kB ludovicofischer
npm/postcss-value-parser@4.2.0 None 0 27.2 kB evilebottnawi
npm/postcss@8.4.35 environment, filesystem +3 376 kB ai
npm/query-string@7.1.3 None +4 61.6 kB sindresorhus
npm/resolve.exports@2.0.2 None 0 23.9 kB lukeed
npm/resolve@1.22.8 environment, filesystem +5 232 kB ljharb
npm/rimraf@5.0.5 environment, filesystem Transitive: shell +52 3.07 MB isaacs
npm/rollup-plugin-livereload@2.0.5 environment, network, shell Transitive: eval, filesystem +19 1.02 MB thgh
npm/rollup-plugin-styles@4.0.0 environment, filesystem Transitive: network, shell, unsafe +168 24.2 MB anidetrix
npm/rollup-plugin-svelte@7.1.6 filesystem Transitive: environment, unsafe +27 13.7 MB conduitry
npm/rollup-plugin-terser@7.0.2 eval Transitive: environment, filesystem, shell, unsafe +32 15.4 MB trysound
npm/rollup@2.79.1 environment, filesystem, unsafe +1 6.88 MB lukastaegert
npm/sade@1.8.1 None +1 44.8 kB lukeed
npm/sander@0.5.1 filesystem Transitive: environment, eval +16 623 kB rich_harris
npm/semiver@1.1.0 None 0 5.44 kB lukeed
npm/sirv-cli@2.0.2 environment, filesystem, network +12 172 kB lukeed
npm/sorcery@0.11.0 Transitive: environment, eval, filesystem +19 834 kB rich_harris
npm/source-map-js@1.0.2 None 0 148 kB 7rulnik
npm/strip-indent@3.0.0 None +1 6.28 kB sindresorhus
npm/sucrase@3.35.0 Transitive: environment, filesystem, network, shell, unsafe +41 3.85 MB alangpierce
npm/svelte-check@3.6.6 Transitive: environment, eval, filesystem, unsafe +100 56.1 MB svelte-language-tools-deploy
npm/svelte-preprocess@5.1.3 environment, filesystem Transitive: eval, unsafe +68 46.3 MB kaisermann
npm/svelte@3.59.2 None 0 10.6 MB conduitry
npm/svelte@4.2.12 Transitive: unsafe +21 6.61 MB svelte-admin
npm/tailwindcss@3.4.1 environment, filesystem Transitive: network, shell, unsafe +116 52.3 MB adamwathan
npm/tippy.js@6.3.7 environment +1 3.53 MB atomiks
npm/typescript@5.4.2 None 0 32.4 MB typescript-bot
npm/util@0.12.5 environment Transitive: eval +22 486 kB goto-bus-stop
npm/uuid@9.0.1 None 0 123 kB ctavan
npm/yaml@1.10.2 environment 0 448 kB eemeli

🚮 Removed packages: npm/@nomicfoundation/hardhat-toolbox@4.0.0, npm/@openzeppelin/hardhat-upgrades@3.0.5

View full report↗︎

@socket-security
Copy link

socket-security bot commented Mar 12, 2024 •
edited
Loading

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/svelte-preprocess@5.1.3
  • Install script: postinstall
  • Source: echo "[svelte-preprocess] Don't forget to install the preprocessors packages that will be used: sass, stylus, less, postcss & postcss-load-config, coffeescript, pug, etc..."

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/svelte-preprocess@5.1.3

@ericglau
Copy link
Member Author

ericglau commented Mar 12, 2024

@SocketSecurity ignore npm/svelte-preprocess@5.1.3

@ericglau ericglau marked this pull request as ready for review March 12, 2024 17:33
andrew-fleming
andrew-fleming approved these changes Mar 12, 2024
View reviewed changes
Copy link
Contributor

@andrew-fleming andrew-fleming left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@ericglau ericglau merged commit d33453b into OpenZeppelin:master Mar 12, 2024
@ericglau ericglau deleted the cairo_v0.10.0 branch March 12, 2024 18:54
@github-actions github-actions bot mentioned this pull request Jun 20, 2025
Merged
@github-actions github-actions bot mentioned this pull request Aug 20, 2025
Merged
This was referenced Sep 9, 2025
Closed
Closed
@github-actions github-actions bot mentioned this pull request Sep 16, 2025
Merged
@github-actions github-actions bot mentioned this pull request Jan 10, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andrew-fleming andrew-fleming andrew-fleming approved these changes

@ericnordelo ericnordelo Awaiting requested review from ericnordelo

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Support Contracts for Cairo v0.10.0

2 participants

@ericglau @andrew-fleming