Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@dydxprotocol/v4-client-js
Advanced tools
General client library for the new dYdX system (v4 decentralized)
The v4-Client Typescript client is used for placing transactions and querying the dYdX chain.
v4-client-js
uses node v18
for development, see the .nvmrc file here.
You can use nvm
to manage different versions of node.
nvm install
nvm use
nvm alias default $(nvm version) # optional
You can run the following commands to ensure that you are running the correct node
and npm
versions.
node -v # expected: v20.x.x (should match .nvmrc)
npm -v # expected: 10.x.x
git clone git@github.com:dydxprotocol/v4-clients.git
v4-client-js/examples
cd v4-client-js/examples
These examples by default use a test account with DYDX_TEST_MNEMONIC
from the TS client library under v4-client-js/examples/constants
.
npm install
npm run build
You should now see a /build/examples
dir generated with JS files. We will use node to run these scripts
node ../build/examples/composite_example.js
Everytime you change the TS code, you need to run npm run build
again, before you execute using node.
Mobile apps needs to load JS as a single JS file. To build, run
npm run webpack
The file is generated in native/ios/v4-native-client.js Pending: Different configurations may be needed to generate JS for Android app
Using the npm version
command will update the appropriate version tags within the package locks and also will add a git tag with the version number..
For example npm version minor
will perform the necessary changes for a minor version release. After the change is merged, a GitHub action will
publish the new release.
FAQs
General client library for the new dYdX system (v4 decentralized)
We found that @dydxprotocol/v4-client-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.