@sushiswap/bentobox - npm Package Compare versions

Comparing version 0.2.0 to 0.3.0

package.json

 {
   "name": "@sushiswap/bentobox",
-  "version": "0.2.0",
-  "description": "",
-  "main": "truffle-config.js",
+  "version": "0.3.0",
+  "description": "BentoBox",
+  "main": "index.js",
   "files": [
     "contracts",
-    "build"
+    "deployments"
   ],
@@ -14,11 +14,27 @@ "directories": {
   "scripts": {
-    "build": "truffle build",
-    "test": "./test.sh $TRUFFLE_TEST",
-    "flatten": "node scripts/flatten.js",
-    "test:cover": "node --max-old-space-size=4096 ./node_modules/.bin/truffle run coverage",
-    "prepublishOnly": "truffle build && node scripts/prepublish.js"
+    "build": "hardhat compile",
+    "console": "hardhat console",
+    "mainnet:deploy": "hardhat --network mainnet deploy",
+    "mainnet:verify": "hardhat --network mainnet etherscan-verify --solc-input --license UNLICENSED",
+    "mainnet:export": "hardhat --network mainnet export",
+    "ropsten:deploy": "hardhat --network ropsten deploy",
+    "ropsten:verify": "hardhat --network ropsten etherscan-verify --solc-input --license UNLICENSED",
+    "ropsten:export": "hardhat --network ropsten export",
+    "kovan:deploy": "hardhat --network kovan deploy",
+    "kovan:export": "hardhat --network kovan export",
+    "kovan:verify": "hardhat --network kovan etherscan-verify --solc-input --license UNLICENSED",
+    "test": "hardhat test --deploy-fixture",
+    "test:coverage": "node --max-old-space-size=4096 ./node_modules/.bin/hardhat coverage",
+    "test:gas": "REPORT_GAS=true yarn test",
+    "prettier": "prettier --write test/**/*.js",
+    "lint": "yarn prettier && solhint -c .solhint.json 'contracts/**/*.sol'"
   },
+  "husky": {
+    "hooks": {
+      "pre-push": "yarn lint && yarn test"
+    }
+  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/sushiswap-core/bentobox.git"
+    "url": "git+https://github.com/sushiswap/bentobox.git"
   },
@@ -28,18 +44,39 @@ "author": "",
   "bugs": {
-    "url": "https://github.com/sushiswap-core/bentobox/issues"
+    "url": "https://github.com/sushiswap/bentobox/issues"
   },
-  "homepage": "https://github.com/sushiswap-core/bentobox#readme",
+  "homepage": "https://github.com/sushiswap/bentobox#readme",
   "devDependencies": {
-    "@truffle/hdwallet-provider": "^1.2.0",
+    "@codechecks/client": "^0.1.10",
+    "@nomiclabs/hardhat-ethers": "^2.0.1",
+    "@nomiclabs/hardhat-etherscan": "^2.1.0",
+    "@nomiclabs/hardhat-solhint": "^2.0.0",
+    "@nomiclabs/hardhat-waffle": "^2.0.1",
+    "@sushiswap/core": "1.4.1",
+    "@tenderly/hardhat-tenderly": "^1.0.6",
     "@uniswap/lib": "^2.2.0-alpha",
     "@uniswap/v2-core": "^1.0.1",
+    "chai": "^4.2.0",
     "coveralls": "^3.1.0",
+    "cross-env": "^7.0.3",
+    "dotenv": "^8.2.0",
+    "ethereum-waffle": "^3.2.1",
     "ethereumjs-util": "^7.0.7",
-    "ethers": "^5.0.19",
-    "ganache-cli": "^6.12.1",
-    "mkdirp": "^1.0.4",
-    "solidity-coverage": "^0.7.12",
-    "truffle": "^5.1.55",
-    "truffle-plugin-verify": "^0.5.2"
+    "ethers": "^5.0.24",
+    "hardhat": "^2.0.5",
+    "hardhat-abi-exporter": "^2.0.6",
+    "hardhat-dependency-compiler": "^1.0.0",
+    "hardhat-deploy": "^0.7.0-beta.38",
+    "hardhat-deploy-ethers": "^0.3.0-beta.7",
+    "hardhat-gas-reporter": "^1.0.3",
+    "hardhat-preprocessor": "^0.1.1",
+    "hardhat-spdx-license-identifier": "^2.0.2",
+    "hardhat-watcher": "^2.0.0",
+    "husky": "^4.3.6",
+    "mocha": "^8.2.1",
+    "prettier": "^2.2.1",
+    "prettier-plugin-solidity": "^1.0.0-beta.2",
+    "solhint": "^3.3.2",
+    "solhint-plugin-prettier": "^0.0.5",
+    "solidity-coverage": "^0.7.12"
   }
 }

README.md

@@ -1,17 +0,31 @@
-# BentoBox 🍱
+# BentoBox
+
+[![Coverage Status](https://coveralls.io/repos/github/sushiswap/bentobox/badge.svg?branch=master)](https://coveralls.io/github/sushiswap/bentobox?branch=master)
+
 Platforms like Compound and Aave allow users to deposit assets as collateral and borrow other assets against this. These protocols have attracted billions of dollars, but they suffer from some major limitations. Taking away these limitations could see much larger adoption. BentoBox aims to do just that.
+
 We solve these issues by having a platform with:
-* Isolated lending pairs. Anyone can create a pair, it’s up to users which pairs they find safe enough. Risk is isolated to just that pair.
-* Flexible oracles, both on-chain and off-chain.
-Liquid interest rates based on a specific target utilization range, such as 70-80%.
-* Contracts optimized for low gas.
-* The supplied assets can be used for flash loans, providing extra revenue for suppliers.
 
-## Deployed Contracts
+- Isolated lending pairs. Anyone can create a pair, it’s up to users which pairs they find safe enough. Risk is isolated to just that pair.
+- Flexible oracles, both on-chain and off-chain.
+  Liquid interest rates based on a specific target utilization range, such as 70-80%.
+- Contracts optimized for low gas.
+- The supplied assets can be used for flash loans, providing extra revenue for suppliers.
 
-- BentoBox - 0xeCd7cBc33b7488838A9111463d3B5E08497FFB84
-- LendingPair - 0xE414335DbaFb43ba357fdA21655daC4187B68a18
+## Docs
 
-## License
+[Development](docs/DEVELOPMENT.md)
 
-Unlicensed
+[Deployment](docs/DEPLOYMENT.md)
+
+## Security
+Audits are being performed by Quantstamp and Peckshield
+
+We use [Slither](https://github.com/crytic/slither) for static analysis. Reports and comments are here:
+
+[BentoBox.sol](docs/Slither_BentoBox.md)
+
+
+## Licence
+
+UNLICENCED

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

1415248

increased by153.53%

Lines of code

13206

increased by10.71%

Number of lines in readme file

32

increased by77.78%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

32

increased by190.91%

Number of package files

57

decreased by-36.67%

No dependency changes