
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
circles-contracts
Advanced tools
This is the initial smart contract implementation for the Circles universal basic income platform.
Note: This is not yet intended for deployment in a production system.
Website // Whitepaper // Chat
There are several components:
This is derived from standard ERC20 implementations, with two main differences: The balance for the "owner" (UBI receiver) is calculated based on the time elapsed since the contract was created, and there is an "hubTransfer" function that allows trusted transitive exchanges. Tokens belong to the hub that deployed them, and can only transact transitively with tokens from the same hub. Tokens have owners, which can be an external account or any kind of contract - in our deployment, they will be gnosis safes.
This is the location of system-wide variables and the trust graph. It has special permissions on all tokens that were deployed through it and have authorized it to perform transitive exchanges. Hub has an owner, which should at least be a multisig, (in our deployment this will also be a gnosis safe) but can in practice be any type of address.
Illustrated here are some of the main available calls:
Requires node version 12
Clone down this repo and npm install
With ganache running (npm run ganache
), in a new console window, node_modules/.bin/truffle compile
then node_modules/.bin/truffle migrate
Note: This is a work in progress and this should be done only for contribution and exploration purposes.
Requires node version 10
npm test
will re-build the contracts / tests and run all of the tests in the test directory.
Tests are executed with the help of Truffle and written in javascript using Mocha with the Chai assertion library.
When you run npm test
a new local blockchain will be started with ganache-cli (unless you already have one running). The contracts will be deployed and the javascript tests will make transactions to this chain.
Helper functions defined in test/helpers provides functionality for more complicated tests such as: reading the event log, or checking for an EVM "revert / throw", or changing the blockstamp times.
GNU Affero General Public License v3.0 AGPL-3.0
FAQs
<img src="https://opencollective.com/
We found that circles-contracts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.