Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
@makerdao/dai
Advanced tools
Dai.js is a JavaScript library that makes it easy to build applications on top of MakerDAO's Dai Stablecoin System. You can use Maker's contracts to open Collateralized Debt Positions, withdraw loans in Dai, trade tokens on OasisDEX, and more.
The library features a pluggable, service-based architecture, which allows users maximal control when integrating the Maker functionality into existing infrastructures. It also includes convenient configuration presets for out-of-the-box usability, a powerful smart contract state inspector, and support for both front-end and back-end applications.
Maker's entire suite of contracts will eventually be accessible through this library—including the DAO governance and the upcoming multi-collateral release—but functionality is limited in the current alpha version to the following areas:
Use NPM or Yarn to install the library:
npm install @makerdao/dai
Then include it:
import Maker from '@makerdao/dai';
// or:
const Maker = require('@makerdao/dai');
Example for transferring Dai:
import Maker from '@makerdao/dai';
const maker = Maker.create('test');
await maker.authenticate();
transferDai(address, amount) {
const dai = maker.service('token').getToken('DAI');
return dai.transfer(address, amount);
}
Example for using CDPs:
import Maker from '@makerdao/dai';
const maker = Maker.create('test');
await maker.authenticate();
const cdp = await maker.openCdp();
const info = await cdp.getInfo();
console.log(info);
For full documentation, please refer to docs.makerdao.com.
For example code that consumes the library, check out this repository.
git clone https://github.com/makerdao/dai.js
yarn install
git submodule update --init --recursive
curl https://dapp.tools/install | sh
The test suite is configured to run on a Ganache test chain. Before running the tests with yarn test
, the test chain will start from a snapshot that has the Maker contracts deployed to it.
If you want to re-run the tests whenever you make a change to the code, use yarn test:watch
.
If you want to start a test chain and leave it running, use yarn test:net
.
There are also automated tests that send transactions through either the Kovan test network or the Ethereum main network. To use them, first set your private key for the appropriate network to an environment variable:
export PRIVATE_KEY="0x..."
Then, use either yarn test:kovan
or yarn test:mainnet
to run the tests.
Since these networks run much more slowly than Ganache, you might want to set the debug environment variable (in order to see some relevant output along the way):
export DEBUG="dai:testing"
You can also run these tests on the local test network with the command yarn test:integration
.
If you have deployed contract code changes to the testchain, run scripts/install-testchain-outputs.sh
to copy any updated ABI files and contract addresses to their expected locations.
yarn build
- create a ES6 build in dist
folderyarn lint
- run an ESLint checkyarn coverage
- run code coverage and generate report in the coverage
folderyarn test
- start a test chain and run all testsyarn test:watch
- start a test chain and run all tests in watch modeyarn test:net
- just start a test chainyarn test:kovan
- run integration tests on Kovanyarn test:mainnet
- run integration tests on mainnetyarn test:integration
- run integration tests on Ganachedist
. E.g. /contracts/addresses/kovan.json
now becomes
/dist/contract/addresses/kovan.json
.Dai.js is available under the MIT license included with the code.
FAQs
Library for interacting with the Dai Stablecoin System.
The npm package @makerdao/dai receives a total of 26 weekly downloads. As such, @makerdao/dai popularity was classified as not popular.
We found that @makerdao/dai demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.