Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@gearbox-protocol/dummy
Advanced tools
This repository contains dummy code and is a dummy npm package to test tooling on
Gearbox is a generalized leverage protocol: it allows you to take leverage in one place and then use it across various DeFi protocols and platforms in a composable way. The protocol has two sides to it: passive liquidity providers who earn higher APY by providing liquidity; active traders, farmers, or even other protocols who can borrow those assets to trade or farm with x4+ leverage.
Gearbox protocol is a Marketmake ETHGlobal hackathon finalist.
This repository is subject to the Gearbox bug bounty program, per the terms defined here.
General documentation of the Gearbox Protocol can be found here. Developer documentation with more tech-related infromation about the protocol, contract interfaces, integration guides and audits is available on the Gearbox dev protal.
Running Forge tests requires Foundry. See Foundry Book for installation details.
forge t
yarn fork
or yarn fork-goerli
, respectively.forge t --match-test _live_ --fork-url http://localhost:8545
.It is recommended to set $ETH_MAINNET_BLOCK
or $ETH_GOERLI_BLOCK
to run the tests on a fixed block. Mainnet tests can take significant time to run and can fail unexpectedly due to external provider errors. Re-running the tests on the same block (or without restarting the fork) will be sped up due to caching.
The primary license for Gearbox contracts is the Business Source License 1.1 (BUSL-1.1), see LICENSE. The files licensed under the BUSL-1.1 have appropriate SPDX headers.
contracts/adapters
, contracts/interfaces
are licensed under GPL-2.0-or-later.contracts/integrations
are either licensed under GPL-2.0-or-later or unlicensed (as indicated in their SPDX headers).scripts
, contracts/test
,contracts/mocks
are unlicensed.This application is provided "as is" and "with all faults." Me as developer makes no representations or warranties of any kind concerning the safety, suitability, lack of viruses, inaccuracies, typographical errors, or other harmful components of this software. There are inherent dangers in the use of any software, and you are solely responsible for determining whether this software product is compatible with your equipment and other software installed on your equipment. You are also solely responsible for the protection of your equipment and backup of your data, and THE PROVIDER will not be liable for any damages you may suffer in connection with using, modifying, or distributing this software product.
FAQs
Gearbox dummy repository
The npm package @gearbox-protocol/dummy receives a total of 6 weekly downloads. As such, @gearbox-protocol/dummy popularity was classified as not popular.
We found that @gearbox-protocol/dummy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.