Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@openbook-dex/openbook-v2
Advanced tools
⚠️ Disclaimer: The current code is being audited. Use it at your own risk!
A central-limit order-book program based on Mango V4 and the previous OpenBook program (which was a fork of Serum).
See the LICENSE file.
The majority of this repo is MIT-licensed, but some parts needed for compiling the Solana program are under GPL.
All GPL code is gated behind the enable-gpl
feature. If you use the openbook-v2
crate as a dependency with the client
or cpi
features, you use only MIT
parts of it.
The intention is for you to be able to depend on the openbook-v2
crate for
building closed-source tools and integrations, including other Solana programs
that call into the Openbook program.
But deriving a Solana program with similar functionality to the Openbook program from this codebase would require the changes and improvements to stay publicly available under GPL.
tag | network | program ID |
---|---|---|
v0.1 | mainnet | opnbkNkqux64GppQhwbyEVc3axhssFhVYuwar8rDHCu |
v0.1 | devnet | opnbkNkqux64GppQhwbyEVc3axhssFhVYuwar8rDHCu |
v0.1 | testnet | opnbkNkqux64GppQhwbyEVc3axhssFhVYuwar8rDHCu |
Before you can build the program, you will first need to install the following:
To install the repo, run:
git clone https://github.com/openbook-dex/openbook-v2.git --recursive
The recursive flag ensures that you receive all of the submodules. If you have already cloned without passing in this flag, you can run:
git submodule init
git submodule update
To ensure that you always have the latest submodules, you can configure your git like so:
git config --global submodule.recurse true
To build, run:
just build
To generate the progam & typescript IDLs, run:
just idl
To see whether all of the tests are passing, run:
just test-all
To drill down on a specific test (e.g., test_expired_order), run:
just test test_expired_order
If you want to have tests that automatically re-run when you edit a file, install entr and run:
just test-dev
yarn build
FAQs
Typescript Client for openbook-v2 program.
The npm package @openbook-dex/openbook-v2 receives a total of 2,314 weekly downloads. As such, @openbook-dex/openbook-v2 popularity was classified as popular.
We found that @openbook-dex/openbook-v2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.