Skip to content

feat: update gnosis-sdk - #4136

Merged
cs1707 merged 5 commits into
developfrom
feat/update-gnosis-sdk
Sep 30, 2026
Merged

cs1707 merged 5 commits into
developfrom
feat/update-gnosis-sdk

Conversation

@cs1707

@cs1707 cs1707 commented Sep 28, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

@ddddhm1234

Copy link
Copy Markdown
Contributor

PR扫描结果

依赖变更

依赖 版本 风险 下载 周下载量 最新版
@rabby-wallet/gnosis-sdk 1.4.10-0 3 https://registry.npmjs.org/@rabby-wallet/gnosis-sdk/-/gnosis-sdk-1.4.10-0.tgz 546 1.4.9
@safe-global/safe-deployments 1.37.63 1 https://registry.npmjs.org/@safe-global/safe-deployments/-/safe-deployments-1.37.63.tgz 141741 1.37.63

详细风险信息

@rabby-wallet/gnosis-sdk @ 1.4.10-0

  • 【中危】 使用了不常用的NPM包:
@rabby-wallet/gnosis-sdk在2026-09-20 - 2026-09-26期间下载量仅有 546 次
  • 【高危】 使用了危险的全局变量:
- 访问 fetch (网络请求): 发起网络请求, 可能包含恶意行为
  • 【低危】 触发关键字规则:
- package/dist/utils.js 使用了 ethereum

@safe-global/safe-deployments @ 1.37.63

  • 【低危】 使用了最新或最近发布的版本:
@safe-global/safe-deployments 使用了最新版本: 1.37.63, 且该版本为30天内发布

@socket-security

socket-security Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​rabby-wallet/​gnosis-sdk@​1.4.9 ⏵ 1.4.1078 +210071 +196 -3100

View full report

@rabby-code-reviewer rabby-code-reviewer Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated inline review.

Comment thread package.json Outdated
"@rabby-wallet/eth-walletconnect-keyring": "2.1.7",
"@rabby-wallet/eth-watch-keyring": "1.0.0",
"@rabby-wallet/gnosis-sdk": "1.4.9",
"@rabby-wallet/gnosis-sdk": "1.4.10-0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Blocking: this release regresses Safe support on the API currently consumed by the extension. The package main still reaches ./api → ./txService, but in 1.4.10-0 that active module drops the explicit Blast host/enum and removes existing network entries; the newly added ./chains registry that restores Blast is not wired into the package main. As a result, Blast disappears from GNOSIS_SUPPORT_CHAINS, and constructing its RequestProvider now throws Wrong networkId, breaking existing Safe accounts. Please preserve the prior mappings or publish/use a version that wires the new registry into the active API. @ddddhm1234, please review this dependency/supply-chain delta.

@ddddhm1234

Copy link
Copy Markdown
Contributor

PR扫描结果

依赖变更

依赖 版本 风险 下载 周下载量 最新版
@rabby-wallet/gnosis-sdk 1.4.10-0 3 https://registry.npmjs.org/@rabby-wallet/gnosis-sdk/-/gnosis-sdk-1.4.10-0.tgz 546 1.4.9
@safe-global/safe-deployments 1.37.63 1 https://registry.npmjs.org/@safe-global/safe-deployments/-/safe-deployments-1.37.63.tgz 141741 1.37.63

详细风险信息

@rabby-wallet/gnosis-sdk @ 1.4.10-0

  • 【中危】 使用了不常用的NPM包:
@rabby-wallet/gnosis-sdk在2026-09-20 - 2026-09-26期间下载量仅有 546 次
  • 【高危】 使用了危险的全局变量:
- 访问 fetch (网络请求): 发起网络请求, 可能包含恶意行为
  • 【低危】 触发关键字规则:
- package/dist/utils.js 使用了 ethereum

@safe-global/safe-deployments @ 1.37.63

  • 【低危】 使用了最新或最近发布的版本:
@safe-global/safe-deployments 使用了最新版本: 1.37.63, 且该版本为30天内发布

@ddddhm1234

Copy link
Copy Markdown
Contributor

PR扫描结果

依赖变更

依赖 版本 风险 下载 周下载量 最新版
@rabby-wallet/gnosis-sdk 1.4.10-0 3 https://registry.npmjs.org/@rabby-wallet/gnosis-sdk/-/gnosis-sdk-1.4.10-0.tgz 546 1.4.9
@safe-global/safe-deployments 1.37.63 1 https://registry.npmjs.org/@safe-global/safe-deployments/-/safe-deployments-1.37.63.tgz 141741 1.37.63

详细风险信息

@rabby-wallet/gnosis-sdk @ 1.4.10-0

  • 【中危】 使用了不常用的NPM包:
@rabby-wallet/gnosis-sdk在2026-09-20 - 2026-09-26期间下载量仅有 546 次
  • 【高危】 使用了危险的全局变量:
- 访问 fetch (网络请求): 发起网络请求, 可能包含恶意行为
  • 【低危】 触发关键字规则:
- package/dist/utils.js 使用了 ethereum

@safe-global/safe-deployments @ 1.37.63

  • 【低危】 使用了最新或最近发布的版本:
@safe-global/safe-deployments 使用了最新版本: 1.37.63, 且该版本为30天内发布

@ddddhm1234

Copy link
Copy Markdown
Contributor

PR扫描结果

依赖变更

依赖 版本 风险 下载 周下载量 最新版
@rabby-wallet/gnosis-sdk 1.4.10-0 3 https://registry.npmjs.org/@rabby-wallet/gnosis-sdk/-/gnosis-sdk-1.4.10-0.tgz 759 1.4.10
@safe-global/safe-deployments 1.37.63 1 https://registry.npmjs.org/@safe-global/safe-deployments/-/safe-deployments-1.37.63.tgz 150821 1.37.63

详细风险信息

@rabby-wallet/gnosis-sdk @ 1.4.10-0

  • 【中危】 使用了不常用的NPM包:
@rabby-wallet/gnosis-sdk在2026-09-22 - 2026-09-28期间下载量仅有 759 次
  • 【高危】 使用了危险的全局变量:
- 访问 fetch (网络请求): 发起网络请求, 可能包含恶意行为
  • 【低危】 触发关键字规则:
- package/dist/utils.js 使用了 ethereum

@safe-global/safe-deployments @ 1.37.63

  • 【低危】 使用了最新或最近发布的版本:
@safe-global/safe-deployments 使用了最新版本: 1.37.63, 且该版本为30天内发布

@ddddhm1234

Copy link
Copy Markdown
Contributor

PR扫描结果

依赖变更

依赖 版本 风险 下载 周下载量 最新版
@rabby-wallet/gnosis-sdk 1.4.10 3 https://registry.npmjs.org/@rabby-wallet/gnosis-sdk/-/gnosis-sdk-1.4.10.tgz 759 1.4.10
@safe-global/safe-deployments 1.37.63 1 https://registry.npmjs.org/@safe-global/safe-deployments/-/safe-deployments-1.37.63.tgz 150821 1.37.63

详细风险信息

@rabby-wallet/gnosis-sdk @ 1.4.10

  • 【低危】 使用了最新或最近发布的版本:
@rabby-wallet/gnosis-sdk 使用了最新版本: 1.4.10, 且该版本为30天内发布
  • 【中危】 使用了不常用的NPM包:
@rabby-wallet/gnosis-sdk在2026-09-22 - 2026-09-28期间下载量仅有 759 次
  • 【低危】 触发关键字规则:
- package/dist/utils.js 使用了 ethereum

@safe-global/safe-deployments @ 1.37.63

  • 【低危】 使用了最新或最近发布的版本:
@safe-global/safe-deployments 使用了最新版本: 1.37.63, 且该版本为30天内发布

@rabby-code-reviewer rabby-code-reviewer Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated inline review.

Comment thread package.json
"@rabby-wallet/eth-walletconnect-keyring": "2.1.7",
"@rabby-wallet/eth-watch-keyring": "1.0.0",
"@rabby-wallet/gnosis-sdk": "1.4.9",
"@rabby-wallet/gnosis-sdk": "1.4.10",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ddddhm1234, please review the finalized @rabby-wallet/gnosis-sdk 1.4.10 and @safe-global/safe-deployments 1.37.63 dependency/supply-chain delta.

@cs1707
cs1707 merged commit 969e9eb into develop Sep 30, 2026
3 of 4 checks passed
@cs1707
cs1707 deleted the feat/update-gnosis-sdk branch September 30, 2026 04:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants