-
Notifications
You must be signed in to change notification settings - Fork 151
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
upgrade eth-sig-util #1039
upgrade eth-sig-util #1039
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this looks good to me, just a couple comments. also do we want to merge this into the deps
branch?
@@ -1,5 +1,5 @@ | |||
const crypto = require('crypto') | |||
const ethSigUtil = require('eth-sig-util') | |||
const { signTypedData } = require('@metamask/eth-sig-util') |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
the worker has access to sensitive data so we just need to make sure every time we change or add a dependency here. this looks OK to me but just tagging @floating for double review
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, ideally we would use ethers
for this too if we can. As discussed last week I think we get this in and then update again to switch to ethers if possible.
Socket Security Pull Request Report👍 No new dependency issues detected in pull request Pull request report summary
Bot CommandsTo ignore an alert, reply with a comment starting with Powered by socket.dev |
Co-authored-by: goosewobbler <goosewobbler@pm.me>
eth-sig-util
and upgraded all usage to@metamask/eth-sig-util
TODO: