Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Better crawler to update all_dependencies.toml #2

Open
mario-eth opened this issue Aug 8, 2023 · 1 comment
Open

Better crawler to update all_dependencies.toml #2

mario-eth opened this issue Aug 8, 2023 · 1 comment
Assignees
Labels
enhancement New feature or request good first issue Good for newcomers

Comments

@mario-eth
Copy link
Owner

We need a better way to update the all_dependencies.toml which contains the dependencies that the soldeer is calling to download the sources.

@mario-eth mario-eth added enhancement New feature or request good first issue Good for newcomers labels Aug 8, 2023
@mario-eth mario-eth self-assigned this Aug 11, 2023
@mario-eth
Copy link
Owner Author

Problem
Versioning for Solidity contracts is primarily managed by GitHub and npm. Some projects utilize the proper versioning and release features of GitHub before publishing to npm. However, not all projects adhere to this method.

1st Solution
Develop a crawler that employs npm to retrieve versioning details and then uploads this information to this repository as a zip file, accompanied by a checksum. This checksum will serve those who wish to verify that the zip contains the genuine files and has not been tampered with. While this approach offers greater flexibility, it also raises trust concerns. Users would need to place significant trust in the repository for accurate versioning, which might also impose additional overhead on them.

2nd Solution
Restrict the projects supported by Soldeer to only those that adhere to the proper versioning/release methodology. This would consequently reduce the number of projects that can be supported.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers
Projects
None yet
Development

No branches or pull requests

1 participant