
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@aurora-is-near/aurora-oracle
Advanced tools
An oracle contract that is updated with configured USD price tokens.
An oracle contract that is updated with configured USD price tokens. A backend process collects those prices from the CoinGecko API.
This repository enforces semantic commit messages. For more details and examples see the Conventional Commits Specification.
To get the price of tokenA against tokenB with decimals of tokenB call the following function:
getPairRate(string memory tokenA, string memory tokenB, uint8 decimalsTokenB)
Where tokenA and tokenB are the symbols of the tokens (CAPITAL). Only allowed tokens allowed as inputs for this function.
For example, to get the price of ETH against BTC. BTC has 8 decimals:
getPairRate("ETH","BTC",8)
Or, to get the price of TPRO against USDC. USDC has 6 decimals:
getPairRate("TPRO","USDC",6)
To get all allowed token symbols:
getAllTokenSymbols()
The Solidity contract is available at contracts/AuroraOracle.sol.
The Contract ABI is available at abi/oracleContractABI.json.
scripts/00_replaceOwner.js
scripts/01_getPairRate.js
scripts/02_getAllowedSymbols.js
scripts/04_getPairRateFullTest.js
To run the Hardhat tests
yarn test
This repository is distributed as private GitHub Package so that we can deploy it from another process (e.g. via the be-aurora-oracle).
To install the package you will need to authenticate to GitHub Packages, then:
To deploy the contract a given network:
npx @aurora-is-near/oracle deploy <NETWORK> --private-key <AURORA-PRIVATE-KEY>
For example:
npx @aurora-is-near/oracle deploy tpro --private-key abc-123
The available networks are defined in the hardhat.config.js file.
You can also set the private key via the AURORA_PRIVATE_KEY
environment variable.
Once a new network is added to the hardhat.config.js file
and the change is merged into the main
branch the release process will run and
a new version will be deployed. Once this new version is available we should be
able to trigger the deployment script for that network, as above.
FAQs
An oracle contract that is updated with configured USD price tokens.
The npm package @aurora-is-near/aurora-oracle receives a total of 0 weekly downloads. As such, @aurora-is-near/aurora-oracle popularity was classified as not popular.
We found that @aurora-is-near/aurora-oracle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.