
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@makerdao/dai-plugin-config
Advanced tools
A dai.js plugin for retrieving Dai.js configuration objects async.
This plugin fetches configuration data from a testchain backend, and creates a config object to be provided to the Maker SDK so it can be used with a testchain. Add it to the end of the plugins
array to ensure the options override the default config.
see Dai.js for more details
import Maker from '@makerdao/dai';
import configPlugin from '@makerdao/dai-plugin-config';
const config = {
plugins: [
[configPlugin, { testchainId: '123abc', backendEnv: 'dev' }]
],
log: false
};
await Maker.create('http', config);
testchainId
: Must be a running testchain ID on the selected backend environment.
backendEnv
: (optional) defaults to the 'prod' URL, which is http://18.185.172.121:4000/chain/
. Options are prod
, dev
, or any user-specified URL.
In the beforeCreate
block, the plugin will fetch testchain data from the URL. This includes the testchain RPC, all the deployed contracts, and required tokens. It will create a config object that looks like this:
config = {
url: rpc_url,
provider: {
type: 'HTTP',
network: chainConfig.type
},
smartContract: { addContracts },
token: { erc20 }
};
We run Prettier on-commit, which means you can write code in whatever style you want and it will be automatically formatted according to the common style when you run git commit
.
To publish this package, simply run:
yarn publish
This will prompt for a new version, create a new commit and tag for that version, automatically build the project and then publish the package to npm.
Don't forget to use git push --tags
to push the commit with the new version along with the new tag pointing to it.
The dai config plugin is MIT licensed.
FAQs
A dai.js plugin for retrieving Dai.js configuration objects async.
We found that @makerdao/dai-plugin-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 19 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.