Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
nomics-platform
Advanced tools
This repository contains the Nomics Platform Integration Specification as well as an auditing tool to verify compliance with the specification.
To audit your endpoint, install Node.js and run:
npx nomics-platform audit https://path-to-your-api-root
The following section describes the API that an exchange must implement in order to integrate with the Nomics platform. From the root of your API, you must implement the following endpoints.
/info
- Exchange InformationThe /info
endpoint returns information about the exchange as a whole, and is used by Nomics to display information about your exchange to users.
None
JSON object containing the following properties:
name
: Required The name of the exchangedescription
: A one paragraph description in plain text (no html)logo
: A URL to your exchange's logo. It should be an SVG or a 500x500 PNGwebsite
: A URL to your exchangetwitter
: Twitter username to your exchange (without @)Example:
{
"name": "Exchange Name",
"description": "A one paragraph description of the exchange in plain text",
"logo": "https://example.com/exchange-logo.png",
"website": "https://example.com",
"twitter": "example"
}
/markets
- Available MarketsThe /markets
endpoint returns a list of all available markets on your exchange and is used to query other endpoints on your API.
None
JSON array of objects (one for each market) containing the following properties:
id
: Required The exchange's ID of the marketbase
: Required The base currency of the marketquote
: Required The quote currency of the marketExample:
[
{
"id": "BTC-USD",
"base":"BTC",
"quote": "USD"
}, {
"id": "ETH-USDT",
"base": "ETH",
"quote": "USDT"
}
]
/trades
- Historical Executed TradesThe /trades
endpoint returns executed trades historically for a given market (provided via parameters). It allows Nomics to ingest all trades from your exchange for all time.
market
Required A market ID from the /markets
endpointsince
A trade ID from a previous /trades
response. If none is provided, the oldest trades should be returnedJSON array of trade object for the given market after (and not including) the trade ID provided, with the following properties:
id
Required A string ID for the trade that is unique within the scope of the markettimestamp
Required Timestamp of the trade in RFC3339price
Required The price for one unit of the base currency expressed in the quote currency as a string that is parseable to a positive number.amount
Required The amount of the base currency that was traded as a string that is parseable to a positive number.order
The ID of the order that was executed to produce this tradetype
The type of order that resulted in the trade: [market
, limit
]side
The direction of the trade [buy
, sell
]raw
The raw data of the trade as represented by the exchange. This can be any JSON encodable data.Example:
[
{
"id": "123456789",
"timestamp": "2006-01-02T15:04:05.999999999Z07:00",
"price": "123.45678",
"amount": "48.75",
"order": "8afe76fabe8befa",
"type": "market",
"side": "buy",
"raw": [123456789, 1136214245, 123.45678, 48.75, "8afe76fabe8befa", "m"]
}
]
Notes:
since
ID.FAQs
Nomics Platform Toolkit
The npm package nomics-platform receives a total of 11 weekly downloads. As such, nomics-platform popularity was classified as not popular.
We found that nomics-platform demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.