
Product
Rust Support Now in Beta
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
assembly-protocol
Advanced tools
Assembly is a tool to enable DAO contributors to effectively re-imburse and pay contributors for their work while ensuring full transparency.
Assembly is a tool to enable DAO contributors to effectively re-imburse and pay contributors for their work while ensuring full transparency.
At the beginning of each period every core contributor receives a token grant from the DAO in "dist" tokens. These tokens can not be sold and represent the budget allowance of each contributor for the period. Every contributor can spend their budget by burning the dist tokens assigned to them. They can not spend the budget on themselves.
Every grant is represented by a transfer of "grant" tokens that can be 1 for 1 redeemed for compensation at the end of the period, extended by a grace period in which the DAO can freeze accounts in case funds have been misappropriated. In order to allow for oversight through all DAO members every grant needs to be marked with a short note on why this expense was necessary.
Compensation is initially only a single SPL token per distributor. Multiple distributors can be used in parallel to account for grants in different types of tokens. More complex payment schemes should be possible to add and all submissions with sufficient test coverage are welcome.
This project was written in anchor to allow easy customization and integration with more advanced compensation primitives like vesting tokens or options.
programs/assembly
- the on-chain program written in rust
lib
- the typescript client library
tests
- integration tests in typescript exercising both of the above
FAQs
Assembly is a tool to enable DAO contributors to effectively re-imburse and pay contributors for their work while ensuring full transparency.
We found that assembly-protocol demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
Product
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.