
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@daostack/test-env-experimental
Advanced tools
This repository is used to create docker images that can be used for testing the DAOstack stack, for example in @daostack/client and @doastack/alchemy
The test environment consists of 3 (related) docker images:
daostack that indexes the contracts in the test_env imageThese setups look like this: (for updated examples refer to https://github.com/daostack/client/blob/master/docker-compose.yml and https://github.com/daostack/alchemy/blob/master/docker-compose.yml)
docker-compose.yml with the contents belowdocker-compose up graph-nodeversion: "3"
services:
graph-node:
image: 'graphprotocol/graph-node@sha256:8af6adc44d6c55eaed7f6d3ac2b96af0823044e94ffee380288f07e96d5ff30b'
ports:
- 8000:8000
- 8001:8001
- 8020:8020
links:
- ipfs
- postgres
- ganache
environment:
postgres_host: postgres:5432
postgres_user: postgres
postgres_pass: 'letmein'
postgres_db: postgres
ipfs: ipfs:5001
ethereum: private:http://ganache:8545
GRAPH_LOG: "graph.log"
GRAPH_GRAPHQL_MAX_FIRST: 1000
ipfs:
image: daostack/subgraph-ipfs:0.0.1-rc.36-v1-3.0.19
ports:
- 5001:5001
postgres:
image: daostack/subgraph-postgres:0.0.1-rc.36-v1-3.0.19
ports:
- 9432:5432
environment:
POSTGRES_PASSWORD: 'letmein'
ganache:
image: daostack/test-env:0.0.1-rc.36-v1-3.0.19
ports:
- 8545:8545
npmdocker./release.sh will create a new release, which will run the following steps:
npm run deploy-daosnpm run deploy-subgraph./release.sh -d will run the script in development mode, which will run all the steps except publish the result on docker hub
Create and release new images for a new Arc/subgraph combo.
@daostack/migration in https://github.com/daostack/subgraph/blob/master/package-lock.jsonpackage.json and update the @daostack/subgraph and @daostack/migration dependenciesnpm installdocker-compose.yml and update the graphprotocl/graph-node (to match what is in the subgraph package.json) and the daostack/migration image. This image already has the DAOStack base contracts deployeddocker-compose up graph-node. You will now have a graph server running on http://127.0.0.1:8000, but it will not have any subgraphs deployed to it yet.npm run migrate deploy some DAOs and other contracts (in addition to those already available from the @daostack/migration image. If the Arc version has changed, this script may break. If so, fix it.npm run deploy-subgraph: will generate and deploy the subgraph. http://127.0.0.1:8000There are 10 available test accounts - these are the usual ganache test accounts. They have hold some ETH and GEN.
FAQs
Testing environment for DAOstack projects.
We found that @daostack/test-env-experimental demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.