Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@uma/contract-notifier
Advanced tools
This app continuously monitors UMA financial contracts and sends notifications based on predefined conditions. Currently the app implements only expiration notifications on EMP and LSP contracts..
Contract notifier uses UMA API to fetch all known financial contracts, filters soon to expire contracts and notifies them through logging mechanism that can forward it to Slack or any other configured transport mechanism. Notified contracts are stored on Google Datastore, so on repeated runs the application does not notify the same contracts.
The expiring contracts notifier uses following environment variables:
NOTIFIER_CONFIG
is a JSON object containing application specific parameters:
maxTimeTillExpiration
is maximum time in seconds till expiration for the contract to be included in the notification, defaulting to 1 week.chainId
indicates on which chain the monitored contracts are deployed, defaulting to 1 (Ethereum Mainnet).apiEndpoint
sets API to fetch contract information, defaulting to https://prod.api.umaproject.org. As each API endpoint serves its own network this parameter should be consistent with chainId
above.POLLING_DELAY
is value in seconds for delay between consecutive runs, defaults to 1h. If set to 0 then running in serverless mode will exit after the loop.BOT_IDENTIFIER
identifies the application name in the logs.ERROR_RETRIES
is number of times to retry failed operation (e.g. due to API not responding). It defaults to 3 re-tries on error within the execution loop.ERROR_RETRIES_TIMEOUT
is time in seconds between re-tries, defaulting to 1 second.SLACK_CONFIG
is a JSON object containing defaultWebHookUrl
for the default Slack webhook URL and escalationPathWebhookUrls
being an object with webhook URLs for particular Slack channel routing.GOOGLE_APPLICATION_CREDENTIALS
points to Google Cloud Platform service account key file to access Google Datastore. This is only required when running the application locally.From UMA protocol repository run:
yarn contract-notifier --network mainnet_mnemonic
FAQs
UMA Contract Notification Bot
The npm package @uma/contract-notifier receives a total of 62 weekly downloads. As such, @uma/contract-notifier popularity was classified as not popular.
We found that @uma/contract-notifier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.