
Security News
Vite+ Joins the Push to Consolidate JavaScript Tooling
Evan You announces Vite+, a commercial, Rust-powered toolchain built on the Vite ecosystem to unify JavaScript development and fund open source.
@excubiae/contracts
Advanced tools
This package contains the smart contracts which define the composable framework for building custom attribute-based access control policies on Ethereum.
You can learn more in the Design section of the current technical reference document.
The extensions are ready to use Checker / Policy contracts that give unique features (e.g., enforcing a proof of membership for a Semaphore group with frontrunning resistance).
Please, follow the Guides section for an explanation on how to write, integrate & deploy; your own Checker & Policy contracts.
[!IMPORTANT]
Excubiae is currently in the MVP stage. Audits are not yet available. Expect fast development cycles with potential breaking changes — use at your own risk! Please, refer to release section for latest changes and updates.
You can install the excubiae contracts with any node package manager (bun
, npm
, pnpm
,yarn
):
bun add @excubiae/contracts
npm i @excubiae/contracts
pnpm add @excubiae/contracts
yarn add @excubiae/contracts
This package is configured to support the combination of Hardhat and Foundry, see the Hardhat's documentation to learn more.
Compile the smart contracts with Hardhat:
yarn compile:hardhat
Compile the smart contracts with Foundry's Forge:
yarn compile:forge
Run both in one command:
yarn compile
The package provides deployment scripts for the available extensions.
Deploy a Semaphore extension by providing the Semaphore contract address and group ID. This extension enforces membership proofs for a Semaphore group with frontrunning resistance.
Using Hardhat Ignition:
yarn deploy:semaphore-ignition --parameters '{"semaphoreAddress":"0x1234...5678","groupId":1}' --network sepolia
Using Hardhat task:
yarn deploy:semaphore-task --semaphore-address 0x1234...5678 --group-id 1 --network sepolia
Required parameters per deployment:
semaphoreAddress
: Address of the deployed Semaphore contractgroupId
: ID of the Semaphore group to check membership againstnetwork
: Network to deploy to (e.g., sepolia, hardhat, mainnet)Run Mocha to test the contracts (Typescript tests):
yarn test:hardhat
Run Foundry's Forge to test the contracts (Solidity tests):
yarn test:forge
Run both in one command:
yarn test
You can also generate a test coverage report:
yarn test:coverage
Or a test gas report:
yarn test:report-gas
FAQs
Excubiae contracts.
The npm package @excubiae/contracts receives a total of 277 weekly downloads. As such, @excubiae/contracts popularity was classified as not popular.
We found that @excubiae/contracts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Evan You announces Vite+, a commercial, Rust-powered toolchain built on the Vite ecosystem to unify JavaScript development and fund open source.
Security News
Ruby Central’s incident report on the RubyGems.org access dispute sparks backlash from former maintainers and renewed debate over project governance.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.