
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
minimum-viable-nft
Advanced tools
install text editor if you don't have one. I use Sublime Text, and like that it works the same way on all major operating systems: https://www.sublimetext.com/3, but any of them will work. In a pinch, you can get by with the defaults for your operating system, which are notepad (Windows), nano (Linux) and textedit (osx).
verify that everything is installed - you can do this by opening a terminal and typing node -v
and git --version
. It should print the version number in both cases
from a terminal in some convenient place, clone the example code repo: git clone https://github.com/ana0/MinimumViableNFT.git
move into the folder you just cloned cd MinimumViableNFT
install the dependencies: npm ci
(this might take awhile)
make a .env file with cp .env.example .env
. On windows, use copy .env.example .env
instead. Open this file in your text editor, and put the 12 word seed phrase from your metamask in there. Be careful with this step! If you're working inside this repo, the .env file is in the .gitignore, and won't get committed - but if you move this project or any code snippets elsewhere, be sure to check! If your 12 word seed is committed to github, any funds/assets in that account will likely be stolen
make an account on pinata (https://pinata.cloud)
upload an image to pinata (please use one you own), and be sure to check the box to "preserve filename"
again using your text editor, edit the file metadata.json to include the link to your image. You can also change the name and description to be anything you want
again using your text editor, edit the file contract-metadata.json to include the link to your image, name and description you want. seller_fee_basis_points
is the percentage you will receive if the work is resold, and fee_recipient
is the address that will receive it.Do not set the seller_fee_basis_points
higher than 3000 (30%), as this is not supported by Opensea
upload the metadata and contract-metadata files to pinata, again being sure to check the box to "preserve filename", and get the CID
using your text editor, change the CID in the file migrations/02_deploy_main_contract.js
from your terminal open in the MinimumViableNFT folder, run: npm run deploy
go to opensea and create an account, this will ask you to sign a message with metamask. you should see your NFT in your wallet
if you want to mint further NFTs, transfer these NFTs to other people, there's an example script in transfer.js
. You can run it from a terminal open in this repo with node transfer.js
FAQs
Contracts for a minimum viable NFT compatible with Opensea Polygon
The npm package minimum-viable-nft receives a total of 0 weekly downloads. As such, minimum-viable-nft popularity was classified as not popular.
We found that minimum-viable-nft demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.