Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@merofinance/protocol
Advanced tools
[![Health Checks](https://github.com/merofinance/protocol-dev/actions/workflows/health-checks.yml/badge.svg)](https://github.com/merofinance/protocol-dev/actions/workflows/health-checks.yml)
This is the official repository for the Mero protocol contracts.
In addition to the code, check out the official Mero documentation as well as the Mero developers documentation, and the list of deployed contracts.
The test suite repository is built with Pytest, which is used by Brownie.
The test suite relies on the following packages:
mainnet-fork
modeTo get started using this repository, install the requirements (presumably in a virtual enviroment):
pip install -r requirements.txt
To run the full test suite, run:
brownie test
For a more detailed overview of how the Mero protocol can be tested, please read the test suite documentation.
To compile all contracts, run:
brownie compile
For a detailed overview of how to use Brownie, please check out the official docs.
All Mero contracts are located within the contracts
directory.
The tests are located within the tests
directory. The different liquidity pools that exist are specified in the tests directory here.
The required environments variables that need to be set for running the test suite are listed here.
Note: The ETHERSCAN_TOKEN
environment variable may need to be specified when running tests in mainnet-fork
mode, as Etherscan is used to fetch the latest contract data and the API request limit may be reached.
FAQs
[![Health Checks](https://github.com/merofinance/protocol-dev/actions/workflows/health-checks.yml/badge.svg)](https://github.com/merofinance/protocol-dev/actions/workflows/health-checks.yml)
We found that @merofinance/protocol demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.