
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
io.github.theborakompanioni:bitcoin-fee-estimate-bitcoin-jsonrpc
Advanced tools
bitcoin core jsonrpc api fee client package
A generalized and extensible interface of multiple Bitcoin Fee Recommendation APIs. The following providers are available out of the box:
estimatestmartfee
)Download from Maven Central.
repositories {
mavenCentral()
}
implementation "io.github.theborakompanioni:bitcoin-fee-starter:${bitcoinFeeVersion}"
<dependency>
<groupId>io.github.theborakompanioni</groupId>
<artifactId>bitcoin-fee-starter</artifactId>
<version>${bitcoinFeeVersion}</version>
</dependency>
Start the example application with
./gradlew -p bitcoin-fee/bitcoin-fee-example-application bootRun --args="--spring.profiles.active=development --debug"
Then visit http://localhost:8080
in your browser.
./gradlew build -x test
./gradlew test integrationTest e2eTest --rerun-tasks
Gradle is used for checksum and signature verification of dependencies.
# write metadata for dependency verification
./gradlew --write-verification-metadata pgp,sha256 --export-keys
# update buildscript dependency locks
./gradlew dependencies --write-locks
See Gradle Userguides Verifying dependencies and Locking dependency versions for more information.
Checkstyle with adapted google_checks is used for checking Java source code for adherence to a Code Standard.
# check for code standard violations with checkstyle
./gradlew checkstyleMain --rerun-tasks
SpotBugs is used for static code analysis.
# invoke static code analysis with spotbugs
./gradlew spotbugsMain --rerun-tasks
All contributions and ideas are always welcome. For any question, bug or feature request, please create an issue. Before you start, please read the contributing guidelines.
The project is licensed under the Apache License. See LICENSE for details.
FAQs
Unknown package
We found that io.github.theborakompanioni:bitcoin-fee-estimate-bitcoin-jsonrpc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.