Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@metamask/insights-example-snap
Advanced tools
MetaMask example snap demonstrating the use of the Transaction Insights API.
@metamask/transaction-insights-example-snap
This snap demonstrates how to use the endowment:transaction-insight
permission
to provide transaction insights to the user. This snap uses the onTransaction
handler to provide insights for transactions that are sent by the user.
Transaction insights are displayed in the transaction confirmation screen, and can show any Snaps-based UI components.
Note: Using
onTransaction
requires theendowment:transaction-insight
permissions. Refer to the documentation for more information.
Along with other permissions, the manifest of this snap includes the
endowment:transaction-insight
permission:
{
"initialPermissions": {
"endowment:transaction-insight": {}
}
}
By default, the onTransaction
does not receive the transaction origin. If you
want to receive the origin, you can add the allowTransactionOrigin
property to
the permission definition:
{
"initialPermissions": {
"endowment:transaction-insight": {
"allowTransactionOrigin": true
}
}
}
This snap exposes an onTransaction
handler, which is called when a transaction
is sent by the user. The handler receives the transaction details and the
transaction origin (if the allowTransactionOrigin
property is set to true
).
The snap decodes the transaction data and returns the decoded data as the transaction insight.
For more information, you can refer to the end-to-end tests.
FAQs
MetaMask example snap demonstrating the use of the Transaction Insights API.
We found that @metamask/insights-example-snap demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.