
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@terminal-fi/swappa
Advanced tools
Swappa is a framework for finding and executing best routes for swapping cERC20 tokens. Framework consists of two parts: * @terminal-fi/swappa: JavaScript library that can be used to find best swap routes. * SwappaRouterV1 smart contract: That can be used
Swappa is a framework for finding and executing best routes for swapping cERC20 tokens. Framework consists of two parts:
SwappaRouter is designed for Celo network, thus gas optimizations aren't always highest priority since TX costs are assumed to be reasonable on Celo network. SwappaRouter instead optimizes for simplicity, readability and extensibility.
Routing library consits of 3 steps:
Swappa comes with a simple command line tool to test its routing and execution.
> yarn ts-node src/cli/cli.ts --input CELO --output cUSD --amount 1
> yarn ts-node src/cli/cli.ts --help
Example invokation to test single pair of a specific registry:
> yarn ts-node src/cli/cli.ts --registries=mobius --max-swaps=1 --input USDC --output cUSD --amount 1337
FAQs
Swappa is a framework for finding and executing best routes for swapping cERC20 tokens. Framework consists of two parts: * @terminal-fi/swappa: JavaScript library that can be used to find best swap routes. * SwappaRouterV1 smart contract: That can be used
The npm package @terminal-fi/swappa receives a total of 12 weekly downloads. As such, @terminal-fi/swappa popularity was classified as not popular.
We found that @terminal-fi/swappa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.