
Security News
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.
@gearbox-protocol/permissionless-cli
Advanced tools
Ensure the following environment variables are properly configured:
RPC_URL – RPC URLANVIL_URL – Testnet RPC URL for txs simulations and batchingADDRESS_PROVIDER – Address of the "Address Provider" contract
0xF7f0a609BfAb9a0A98786951ef10e5FE26cC1E38
PRIVATE_KEY – Private keyEnsure the following environment variables are properly configured:
-r, --rpc-url
Mainnet RPC URL. If not provided, the script assumes you're using a testnet.
Env var: RPC_URL
--anvil-url (mandatory)
RPC URL for testnet simulations and batching.
Env var: ANVIL_URL
-p, --address-provider>
Address of the AddressProvider contract.
Env var: ADDRESS_PROVIDER
-k, --private-key
Private key for mainnet transactions.
Env var: PRIVATE_KEY
-a, --account
Testnet account address. Defaults to the InstanceManager owner if not provided.
-o, --out-dir
Directory path to save output results.
Env var: OUTPUT_DIR
--testnet
Flag to indicate usage of a testnet.
--execute
Actually execute the prepared transactions.
--force
Force transaction execution, ignoring safety checks.
--timelock
Wrap transactions using queueTransaction (timelock logic).
-s, --skip-batching
Skip batching transactions. Useful to debug Anvil issues.
Default: false
-c, --config
Path to the configuration file.
Default: undefined
-e, --eta (mandatory for --timelock)
ETA timestamp for queued transactions.
Default: undefined
-m, --market-configurator(mandatory for --timelock)
Address of the MarketConfigurator contract.
pnpm start update-feeds
Update price feeds.pnpm start batch-txs -t "path/to/txs"
Simaulte and convert RawTxs from json to Safe Bathces.pnpm start execute-batches
Create execute txs for queued batchesFAQs
Permissionsless scripts
The npm package @gearbox-protocol/permissionless-cli receives a total of 1 weekly downloads. As such, @gearbox-protocol/permissionless-cli popularity was classified as not popular.
We found that @gearbox-protocol/permissionless-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.

Research
/Security News
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.