Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@ubeswap/subgraph
Advanced tools
[Ubeswap](https://ubeswap.org/) is a decentralized protocol for automated token exchange on Ethereum.
Ubeswap is a decentralized protocol for automated token exchange on Ethereum.
This subgraph dynamically tracks any pair created by the ubeswap factory. It tracks of the current state of Ubeswap contracts, and contains derived stats for things like historical data and USD prices.
Make sure to update package.json settings to point to your own graph account.
Below are a few ways to show how to query the ubeswap-subgraph for data. The queries show most of the information that is queryable, but there are many other filtering options that can be used, just check out the querying api. These queries can be used locally or in The Graph Explorer playground.
Contains data across all of Ubeswap. This entity tracks important things like total liquidity (in CELO and USD, see below), all time volume, transaction count, number of pairs and more.
Contains data on a specific token. This token specific data is aggregated across all pairs, and is updated whenever there is a transaction involving that token.
Contains data on a specific pair.
Every transaction on Ubeswap is stored. Each transaction contains an array of mints, burns, and swaps that occured within it.
These contain specifc information about a transaction. Things like which pair triggered the transaction, amounts, sender, recipient, and more. Each is linked to a parent Transaction entity.
This query fetches aggredated data from all ubeswap pairs and tokens, to give a view into how much activity is happening within the whole protocol.
{
ubeswapFactories(first: 1) {
pairCount
totalVolumeUSD
totalLiquidityUSD
}
}
In addition to any that might be in the code base:
package.json
scripts need updated commandsFAQs
[Ubeswap](https://ubeswap.org/) is a decentralized protocol for automated token exchange on Ethereum.
The npm package @ubeswap/subgraph receives a total of 2 weekly downloads. As such, @ubeswap/subgraph popularity was classified as not popular.
We found that @ubeswap/subgraph demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.