Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
🦑 Smart contracts for Ocean Protocol v4. https://oceanprotocol.com Ocean v4 is part of the Ocean Protocol toolset.
This is in beta state and you can expect running into problems. If you run into them, please open up a new issue.
For quick installation of the contract ABIs
:
npm install @oceanprotocol/contracts
pip3 install ocean-contracts
By default, Python does not support importing json
files directly, so it is recommended to use json-sempai
package in order to automatically importing ABIs/json
artifacts.
pip3 install json-sempai
# install the ocean-contracts package.
from jsonsempai import magic
from artifacts import address
Base IP is now represented by an NFT, from which a datapublisher can create multiple ERC20s representing different type of access for the same dataset.
Help Ocean Community Monetize: there's a swap fee for the Ocean Community, if Ocean or allied tokens are the basetoken in a pool, Ocean Community will receive 0.1% swap fee, otherwhise it will be 0.2%.
Based on ERC721 and ERC20 templates to provide different features
Introduce an advanced Fee Structure both for Market and Provider runners.
Roles Administration: there are now multiple roles for a more flexible administation both at NFT and ERC20 levels
Key-value store in the NFT contract : NFT contract can be used to store custom key-value pairs (ERC725Y standard)
Multiple NFT template support: the Factory can deploy different types of NFT templates
Multiple datatoken template support: the Factory can deploy different types of Datatoken templates
Interaction flow from DataPublisher point of view.
How roles are handled in the v4.
Selection of most common functions.
Helper functions which can perform multiple steps in 1 call.
If you have any difficulties with the quickstarts, or if you have further questions about how to use the contracts please reach out to us on Discord.
If you notice any bugs or issues with this repo please open an issue on github. -->
The ocean.js and ocean.py libraries wrap contracts
in JavaScript and Python respectively. They each have quickstart guides.
Run hardhat in a new terminal:
export ALCHEMY_URL="https://eth-mainnet.alchemyapi.io/v2/XXXXXXXX"
npm install
npx hardhat node
Open a new terminal to run the tests:
export ALCHEMY_URL="https://eth-mainnet.alchemyapi.io/v2/XXXXXXXX"
npm run test:full
# same thing, but with coverage reporting
npm run test:full:cover
You can execute just unit tests with:
npm run test:unit
You can execute just flow tests with:
npm run test:flow
Copyright ((C)) 2023 Ocean Protocol Foundation
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
FAQs
🐳 Ocean Protocol L1 - v4
We found that ocean-contracts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.