Security News
Opengrep Emerges as Open Source Alternative Amid Semgrep Licensing Controversy
Opengrep forks Semgrep to preserve open source SAST in response to controversial licensing changes.
dd-tool-package
Advanced tools
This is the TS CLI implementation of a tool that would allow to replicate a sequence of TXs
To share DD (e.g. How many emissions this week?)
To share POCs (e.g. How do I repro a potential attack?)
Check /task/steps.json
This is an example of how to get started
The globalLoop would receive a DDSequence
to execute
Input and Output mappings are available to create variables
Variables can be concrete
or a stateMapping
Concrete is a real value (e.g your address)
StateMapping is a mapping to the GlobalState
With this system you can store intermediary results or pass hardcoded values
Ganache offers Storage Rewrite and ETH Minting
Some global options in AdditionalSettings
allow to use them (MOSTLY TODO)
theGlobalLoop
is the entire global logic
executeOne
is the function that uses ganache, hidden away as it's a low level implementation
Ganache expects ExecutableContract
s these are the low level version used internally and returns string/bytes as responses
This means the "Low level" / execution is at the lowest level
The interpretation happens in the loop
Understand theLoop
and the types
Once you read these, everything should be more clear
Looking for help with tests
Help in writing the ERC20 Cheats
See TODO for more or reach out on twitter
FAQs
Uses Ganache to Fork the chain and run operations
We found that dd-tool-package demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Opengrep forks Semgrep to preserve open source SAST in response to controversial licensing changes.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.