v4.2.0 - Security Exploits + Dev Activity widgets + Maintainance

.github/workflows/basic-checks.yml

@@ -21,7 +21,7 @@ jobs:
                   ref: ${{ github.event.pull_request.head.sha }}
             - uses: actions/setup-node@v3
               with:
-                  node-version: "18.15.0"
+                  node-version: "22.12.0"
                   cache: "yarn"
                   cache-dependency-path: |
                       yarn.lock

.github/workflows/deploy-dev.yml

@@ -55,7 +55,7 @@ jobs:
 
             - uses: actions/setup-node@v3
               with:
-                  node-version: "20.11.0"
+                  node-version: "22.12.0"
                   cache: "yarn"
                   cache-dependency-path: |
                       yarn.lock
@@ -94,7 +94,7 @@ jobs:
             - name: deploy
               uses: kefranabg/s3-sync-action@master # https://github.com/kefranabg/s3-sync-action
               with:
-                  args: --acl public-read --follow-symlinks --delete
+                  args: --follow-symlinks --delete
               env:
                   AWS_ACCESS_KEY_ID: ${{ secrets.DEPLOYER__AWS_ACCESS_KEY_ID }}
                   AWS_SECRET_ACCESS_KEY: ${{ secrets.DEPLOYER__SECRET_ACCESS_KEY }}

.github/workflows/deploy-epsilon.yml

@@ -45,7 +45,7 @@ jobs:
 
             - uses: actions/setup-node@v3
               with:
-                  node-version: "18.15.0"
+                  node-version: "22.12.0"
                   cache: "yarn"
                   cache-dependency-path: |
                       yarn.lock
@@ -83,7 +83,7 @@ jobs:
             - name: deploy
               uses: kefranabg/s3-sync-action@master # https://github.com/kefranabg/s3-sync-action
               with:
-                  args: --acl public-read --follow-symlinks
+                  args: --follow-symlinks
               env:
                   AWS_ACCESS_KEY_ID: ${{ secrets.DEPLOYER__AWS_ACCESS_KEY_ID }}
                   AWS_SECRET_ACCESS_KEY: ${{ secrets.DEPLOYER__SECRET_ACCESS_KEY }}

.github/workflows/deploy-prod.yml

@@ -59,7 +59,7 @@ jobs:
 
             - uses: actions/setup-node@v3
               with:
-                  node-version: "20.11.0"
+                  node-version: "22.12.0"
                   cache: "yarn"
                   cache-dependency-path: |
                       yarn.lock
@@ -98,7 +98,7 @@ jobs:
             - name: deploy
               uses: kefranabg/s3-sync-action@master # https://github.com/kefranabg/s3-sync-action
               with:
-                  args: --acl public-read --follow-symlinks --delete
+                  args: --follow-symlinks --delete
               env:
                   AWS_ACCESS_KEY_ID: ${{ secrets.DEPLOYER__AWS_ACCESS_KEY_ID }}
                   AWS_SECRET_ACCESS_KEY: ${{ secrets.DEPLOYER__SECRET_ACCESS_KEY }}

package.json

@@ -27,7 +27,7 @@
     "@types/cypress-cucumber-preprocessor": "4.0.5",
     "@types/react": "18.2.25",
     "@types/react-dom": "18.2.6",
-    "@typescript-eslint/eslint-plugin": "5.54.0",
+    "@typescript-eslint/eslint-plugin": "5.62.0",
     "@typescript-eslint/parser": "5.62.0",
     "@vitejs/plugin-react": "6.0.1",
     "autoprefixer": "10.4.21",
@@ -47,7 +47,7 @@
     "husky": "8.0.3",
     "prettier": "3.5.3",
     "typescript": "5.9.3",
-    "vite": "8.0.12",
+    "vite": "8.0.16",
     "vite-tsconfig-paths": "6.1.1",
     "vitest": "4.1.5"
   },

packages/frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@alphaday/frontend",
   "private": true,
-  "version": "4.1.0",
+  "version": "4.1.1",
   "type": "module",
   "scripts": {
     "prepare": "export VITE_COMMIT=$(git rev-parse --short HEAD)",
@@ -25,7 +25,7 @@
     "@web3modal/ethereum": "2.7.1",
     "@web3modal/react": "2.7.0",
     "chroma-js": "3.1.2",
-    "dompurify": "3.2.4",
+    "dompurify": "3.4.13",
     "es6-error": "4.1.1",
     "firebase": "10.0.0",
     "html2canvas": "1.4.1",
@@ -53,8 +53,8 @@
     "redux-persist": "6.0.0",
     "remark-breaks": "4.0.0",
     "sharp": "0.32.6",
-    "unist-util-visit": "5.0.0",
-    "uuid": "9.0.0",
+    "unist-util-visit": "5.1.0",
+    "uuid": "14.0.0",
     "viem": "1.2.5",
     "wagmi": "1.3.9",
     "web3": "1.9.0",
@@ -76,10 +76,10 @@
     "@vitejs/plugin-legacy": "8.0.1",
     "cypress": "12.17.4",
     "dotenv": "16.4.5",
-    "happy-dom": "20.0.11",
+    "happy-dom": "20.8.9",
     "react-test-renderer": "18.2.0",
     "sharp": "0.32.6",
-    "svgo": "3.2.0",
+    "svgo": "3.3.4",
     "terser": "5.39.2",
     "vite-plugin-image-optimizer": "2.0.3",
     "vite-plugin-optimize-css-modules": "1.4.0",

packages/frontend/src/api/hooks/useCustomAnalytics.ts

@@ -23,7 +23,9 @@ export const useCustomAnalytics = () => {
 
     const logButtonClicked = (payload: TButtonClickEventPayload) => {
         const key = EActivityLogEventTypes.ButtonClicked;
-        logEvent(analytics, key, payload);
+        if (analytics) {
+            logEvent(analytics, key, payload);
+        }
         logButtonClickedActivity(payload.buttonName, payload.data);
         Logger.debug("logButtonClicked", key, payload);
     };

packages/frontend/src/api/hooks/useGATracker.ts

@@ -1,10 +1,21 @@
 import { useEffect } from "react";
-import ReactGA from "react-ga4";
+import ReactGADefault from "react-ga4";
 import { useLocation } from "react-router-dom";
 import { useCookieChoice } from "src/api/hooks";
 import { Logger } from "src/api/utils/logging";
 import CONFIG from "src/config";
 
+// react-ga4 ships as CommonJS. Vite's dev pre-bundler (esbuild) resolves the
+// default-import interop correctly, but the production Rollup build double-wraps
+// the default export, leaving `ReactGA.initialize` undefined. Unwrap the extra
+// `default` layer when present so it works under both bundlers.
+const ReactGA =
+    typeof (ReactGADefault as { initialize?: unknown }).initialize ===
+    "function"
+        ? ReactGADefault
+        : (ReactGADefault as unknown as { default: typeof ReactGADefault })
+              .default;
+
 let isInitialized = false;
 
 export const useGaTracker = (): void => {

packages/frontend/src/api/services/developerActivity/developerActivityEndpoints.ts

@@ -0,0 +1,68 @@
+import queryString from "query-string";
+import { TDeveloperActivitySnapshot } from "src/api/types";
+import { Logger } from "src/api/utils/logging";
+import CONFIG from "../../../config/config";
+import { alphadayApi } from "../alphadayApi";
+import {
+    TGetDeveloperActivityRequest,
+    TGetDeveloperActivityRawResponse,
+    TGetDeveloperActivityResponse,
+} from "./types";
+
+const { COINS } = CONFIG.API.DEFAULT.ROUTES;
+
+const developerActivityApi = alphadayApi.injectEndpoints({
+    endpoints: (builder) => ({
+        getDeveloperActivity: builder.query<
+            TGetDeveloperActivityResponse,
+            TGetDeveloperActivityRequest
+        >({
+            query: ({ coin, limit }) => {
+                const params = queryString.stringify(
+                    { limit },
+                    { skipNull: true, skipEmptyString: true }
+                );
+                const path = `${String(COINS.BASE)}${String(
+                    COINS.DEVELOPER_ACTIVITY(coin)
+                )}${params ? `?${params}` : ""}`;
+                Logger.debug("getDeveloperActivity: querying", path);
+                return path;
+            },
+            transformResponse: (
+                r: TGetDeveloperActivityRawResponse
+            ): TGetDeveloperActivityResponse => {
+                try {
+                    const snapshots: TDeveloperActivitySnapshot[] = r
+                        .map((s) => ({
+                            id: s.id,
+                            coin: s.coin,
+                            commitsLast4Weeks: s.commits_last_4_weeks,
+                            contributorsCount: s.contributors_count,
+                            openIssues: s.open_issues,
+                            stars: s.stars,
+                            forks: s.forks,
+                            date: s.date,
+                        }))
+                        // The endpoint returns snapshots newest-first; sort
+                        // oldest-first so the data is ready to plot on a time
+                        // axis and the latest snapshot is the last element.
+                        .sort(
+                            (a, b) =>
+                                new Date(a.date).getTime() -
+                                new Date(b.date).getTime()
+                        );
+                    return { snapshots };
+                } catch (error) {
+                    Logger.error(
+                        "getDeveloperActivity::transformResponse: error while parsing response:",
+                        error
+                    );
+                    return { snapshots: [] };
+                }
+            },
+        }),
+    }),
+    overrideExisting: false,
+});
+
+export const { useGetDeveloperActivityQuery } = developerActivityApi;

packages/frontend/src/api/services/developerActivity/types.ts

@@ -0,0 +1,31 @@
+import { TDeveloperActivityData } from "src/api/types";
+
+/**
+ * Primitive types
+ */
+
+export type TRemoteDeveloperActivitySnapshot = {
+    id: number;
+    coin: string;
+    commits_last_4_weeks: number;
+    contributors_count: number;
+    open_issues: number;
+    stars: number;
+    forks: number;
+    date: string;
+};
+
+/**
+ * Queries
+ */
+
+export type TGetDeveloperActivityRequest = {
+    // coin slug (case insensitive) — required path param
+    coin: string;
+    limit?: number | undefined;
+};
+
+export type TGetDeveloperActivityRawResponse =
+    TRemoteDeveloperActivitySnapshot[];
+
+export type TGetDeveloperActivityResponse = TDeveloperActivityData;

packages/frontend/src/api/services/exploits/exploitsEndpoints.ts

@@ -0,0 +1,101 @@
+import queryString from "query-string";
+import { Logger } from "src/api/utils/logging";
+import CONFIG from "../../../config/config";
+import { alphadayApi } from "../alphadayApi";
+import {
+    TGetExploitsRequest,
+    TGetExploitsRawResponse,
+    TGetExploitsResponse,
+} from "./types";
+
+const { EXPLOITS } = CONFIG.API.DEFAULT.ROUTES;
+
+const parseAmount = (amount: string | null): number | null => {
+    if (amount === null) return null;
+    const parsed = parseFloat(amount);
+    return Number.isNaN(parsed) ? null : parsed;
+};
+
+const exploitsApi = alphadayApi.injectEndpoints({
+    endpoints: (builder) => ({
+        getExploits: builder.query<TGetExploitsResponse, TGetExploitsRequest>({
+            query: (req) => {
+                const params: string = queryString.stringify({
+                    ...req,
+                    limit: req.limit ?? 30,
+                });
+                const path = `${String(EXPLOITS.BASE)}${String(
+                    EXPLOITS.DEFAULT
+                )}?${params}`;
+                Logger.debug("getExploits: querying", path);
+                return path;
+            },
+            transformResponse: (
+                r: TGetExploitsRawResponse,
+                _meta,
+                _arg
+            ): TGetExploitsResponse => {
+                Logger.debug("[EXPLOITS] transformResponse: raw response =", r);
+                Logger.debug(
+                    "[EXPLOITS] transformResponse: typeof r =",
+                    typeof r,
+                    "| keys =",
+                    r && typeof r === "object" ? Object.keys(r) : "n/a",
+                    "| results isArray =",
+                    Array.isArray(r?.results),
+                    "| results length =",
+                    r?.results?.length
+                );
+                try {
+                    const facadeData = r.results
+                        .filter(
+                            (item, index, self) =>
+                                self.findIndex(
+                                    (innerItem) => innerItem.id === item.id
+                                ) === index
+                        )
+                        .map((data) => ({
+                            id: data.id,
+                            hash: data.hash,
+                            title: data.title,
+                            url: data.url,
+                            image: data.image,
+                            shortDescription: data.short_description,
+                            description: data.description,
+                            protocol: data.protocol,
+                            amountUsd: parseAmount(data.amount_usd),
+                            chain: data.chain,
+                            attackType: data.attack_type?.name ?? null,
+                            date: data.date,
+                            source: data.source,
+                            tags: data.tags ?? [],
+                        }));
+                    Logger.debug(
+                        "[EXPLOITS] transformResponse: mapped facade length =",
+                        facadeData.length,
+                        "| first item =",
+                        facadeData[0]
+                    );
+                    return {
+                        ...r,
+                        results: facadeData,
+                    };
+                } catch (error) {
+                    Logger.error(
+                        "[EXPLOITS] transformResponse: FAILED to parse response — returning empty list. error =",
+                        error,
+                        "| raw response was =",
+                        r
+                    );
+                    return {
+                        ...r,
+                        results: [],
+                    };
+                }
+            },
+        }),
+    }),
+    overrideExisting: false,
+});
+
+export const { useGetExploitsQuery } = exploitsApi;