
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
create-stark
Advanced tools
⚠️ Under active development.
CLI to create decentralized applications (dapps) using Scaffold-Stark.
This is an alternative method of installing Scaffold-Stark. Instead of directly cloning SS-2, you can use create-stark to create your own custom instance, where you can choose among several configurations and extensions.
Before you begin, you need to install the following tools:
To get started with Scaffold-Stark 2, follow the steps below:
npx create-stark@latest
yarn chain
This command starts a local Starknet network. The network runs on your local machine and can be used for testing and development.
yarn deploy
This command deploys a test smart contract to the local network. The contract can be modified to suit your needs. Is located in: packages/snfoundry/contracts/src
The yarn deploy
command uses a deploy script to deploy the contract to the network. You can customize it. Is located in: packages/snfoundry/scripts-ts
yarn start
Visit your app on: http://localhost:3000
. You can interact with your smart contract using the Debug Contracts
page. You can tweak the app config in packages/nextjs/scaffold.config.ts
.
What's next:
YourContract.cairo
in packages/snfoundry/contracts/src
packages/nextjs/app/page.tsx
. For guidance on routing and configuring pages/layouts checkout the Next.js documentation.packages/snfoundry/scripts-ts
Visit our docs to learn how to start building with Scaffold-Stark 2.
To know more about its features, check out our website.
We welcome contributions to create-stark and Scaffold-Stark 2!
For more information and guidelines for contributing, please see:
FAQs
> ⚠️ Under active development. >
The npm package create-stark receives a total of 0 weekly downloads. As such, create-stark popularity was classified as not popular.
We found that create-stark demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.