Skip to content

Conversation

ericglau
Copy link
Member

@ericglau ericglau commented Aug 28, 2025

Adds a Confidential tab that implements a confidential fungible token, using OpenZeppelin Confidential Contracts.

Includes:

  • @openzeppelin/wizard-confidential package, UI, AI assistant, MCP tools.

@ericglau
Copy link
Member Author

@SocketSecurity ignore npm/prettier@3.6.2

Copy link

socket-security bot commented Sep 19, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​fhevm/​solidity@​0.7.0591005787100
Added@​fhevm/​core-contracts@​0.7.0-12831007488100
Added@​openzeppelin/​confidential-contracts@​0.2.0771007890100
Added@​fhevm/​hardhat-plugin@​0.0.1-67810010087100
Added@​zama-fhe/​relayer-sdk@​0.1.2861009196100

View full report

@ericglau
Copy link
Member Author

@SocketSecurity ignore npm/@fhevm/hardhat-plugin@0.0.1-6
Package appears to be for mocks

@CoveMB
Copy link
Contributor

CoveMB commented Sep 24, 2025

Screenshot 2025-09-24 at 5 21 25 PM

Not sure if we can make AI description more clear as it already mention confidential + erc-20

Also wondering in tab using "confidential" vs "Zama" ?

"openai": "https://esm.sh/openai@5.13.1"
"openai": "https://esm.sh/openai@5.13.1",
"jszip": "https://esm.sh/jszip@3.6.0",
"@openzeppelin/wizard": "../../node_modules/@openzeppelin/wizard/dist/",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

are those wizard import needed? (could we import from "../core.."?

Copy link
Member Author

@ericglau ericglau Sep 30, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These are needed because there's cross-package imports between the Solidity and Confidential core packages, some of which are used for the types in the AI function definitions. Simplified to use ../core

ericglau added a commit to ericglau/contracts-wizard that referenced this pull request Sep 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants