PL Compass project (Launchpad)

Last update: Mar 10, 2022

Overview

PL Compass project (Launchpad)

Check out the published site on https://pl-compass.on.fleek.co/

Problem statement

There are so many cool ideas and project happening at PL, but it is hard to navigate and understand what is happening where and what was already done/being in progress

Project statement

Improve discoverability and traceability of the projects developed, running and deprecated by people at Protocol Labs without the need for manual db management

Valuable projects would surface more easily, get more contributions, and we'd minimize the amount of energy "wasted" reinventing things in the web3 industry.

Plus:

More developers will create projects and apps using PL ecosystem if docs are easily to find / easily to read
You can view a collection of PL projects in a single place, and navigate to each of them easily. The index/list/collection should include their github stars, health, activity, etc..
You could also filter based on language, category or other -- e.g. more contributors & attention for projects

Key features

Internal focus → People in PL should be able to figure out what things are being developed right now and navigate to find the useful resources for them easily
Simple update → Databases with multiple source of input are hard to maintain, this process should be automated as much as possible
Simple discoverability → Representation of the information should be convenient for users to navigate through, finding relevant information through queries, labels or mind maps
Simple traceability → Figure out who was the person responsible for the project and what were all the contributors to it during its lifetime

Tool description

Simple website similar to https://ecosystem.filecoin.io/ for navigating across existing Tools → Github Projects → Consumer use-cases in Protocol Labs for better structure and love to the projects being created in PL and its community

Initial project idea brainstorming

Miro board

Comments

Bump loader-utils from 1.4.0 to 1.4.1
Bumps loader-utils from 1.4.0 to 1.4.1.

Release notes

Sourced from loader-utils's releases.

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

Changelog

Sourced from loader-utils's changelog.

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

Commits

8f082b3 chore(release): 1.4.1

4504e34 fix: security problem (#220)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump libp2p and ipfs
Bumps libp2p to 0.40.0 and updates ancestor dependency ipfs. These dependencies need to be updated together.

Updates libp2p from 0.36.2 to 0.40.0

Release notes

Sourced from libp2p's releases.

libp2p v0.40.0

Upgrading

Please see the migration guide for upgrading to this release: doc/migrations/v0.37-v0.40.md

⚠ BREAKING CHANGES

libp2p no longer automatically dials every discovered peer

to replicate the old behaviour, listen for 'peer:discovery' events and dial peers manually

modules no longer implement Initializable instead switching to constructor injection

details in: remove @libp2p/components (#1427) (a3847f2)

Features

allow skipping encryption and custom muxer factory in upgrader (#1411) (6615efa)

deny incoming connections and add allow/deny lists (#1398) (c185ef5)

Bug Fixes

add after upgrade inbound method (#1422) (487b942)

add pending connection limit (#1423) (b717beb)

close stream after sending identify (#1424) (a74d22a)

do not auto-dial peers (#1397) (ca30192)

enable identify service all the time (#1440) (931e042)

regenerate protobuf defs (#1439) (e10eea2)

remove @libp2p/components (#1427) (a3847f2)

libp2p v0.39.5

Bug Fixes

stub new connection manager accept incoming connection method (#1404) (5ad175c)

libp2p v0.39.4

Bug Fixes

update insecure connection encrypter (#1400) (12a2c75)

libp2p v0.39.3

Bug Fixes

when creating dial targets, encapsulate PeerIds last (#1389) (ec02351)

yield only final peers from dht getClosestPeers (#1380) (3f57eda)

... (truncated)

Changelog

Sourced from libp2p's changelog.

0.40.0 (2022-10-17)

⚠ BREAKING CHANGES

modules no longer implement Initializable instead switching to constructor injection

the old behaviour was to dial any peer we discover, now we just add them to the peer store instead

Features

allow skipping encryption and custom muxer factory in upgrader (#1411) (6615efa)

deny incoming connections and add allow/deny lists (#1398) (c185ef5)

Bug Fixes

add after upgrade inbound method (#1422) (487b942)

add pending connection limit (#1423) (b717beb)

close stream after sending identify (#1424) (a74d22a)

do not auto-dial peers (#1397) (ca30192)

enable identify service all the time (#1440) (931e042)

regenerate protobuf defs (#1439) (e10eea2)

remove @libp2p/components (#1427) (a3847f2)

0.39.5 (2022-10-05)

Bug Fixes

stub new connection manager accept incoming connection method (#1404) (5ad175c)

0.39.4 (2022-10-04)

Bug Fixes

update insecure connection encrypter (#1400) (12a2c75)

0.39.3 (2022-09-28)

Bug Fixes

when creating dial targets, encapsulate PeerIds last (#1389) (ec02351)

yield only final peers from dht getClosestPeers (#1380) (3f57eda)

0.39.2 (2022-09-21)

Bug Fixes

... (truncated)

Commits

9fcaff8 chore: release 0.40.0 (#1410)

c69e452 deps: update it-* deps to ESM versions (#1444)

931e042 fix: enable identify service all the time (#1440)

f4b1f54 docs: update metrics docs (#1441)

a74d22a fix: close stream after sending identify (#1424)

e10eea2 fix: regenerate protobuf defs (#1439)

a3847f2 fix!: remove @libp2p/components (#1427)

b717beb fix: add pending connection limit (#1423)

487b942 fix: add after upgrade inbound method (#1422)

14acff5 docs: fix whitespace

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by npm-service-account-libp2p, a new releaser for libp2p since your current version.

Updates ipfs from 0.62.1 to 0.65.0

Release notes

Sourced from ipfs's releases.

ipfs ipfs-v0.65.0

See the upgrade guide.

⚠ BREAKING CHANGES

ipfs is now bundled with [email protected] which has different config. See the migration guide here: https://github.com/libp2p/js-libp2p/blob/master/doc/migrations/v0.39-v0.40.md

Features

upgrade libp2p to 0.40.x (#4237) (0cee4a4)

Dependencies

The following workspace dependencies were updated

dependencies

ipfs-cli bumped from ^0.14.2 to ^0.15.0

ipfs-core bumped from ^0.16.1 to ^0.17.0

devDependencies

interface-ipfs-core bumped from ^0.156.1 to ^0.157.0

ipfs-client bumped from ^0.9.1 to ^0.9.2

ipfs-core-types bumped from ^0.12.1 to ^0.13.0

ipfs-http-client bumped from ^58.0.1 to ^59.0.0

ipfs ipfs-v0.64.2

Bug Fixes

update @multiformats/multiadd to 11.0.0 (2a830bf)

Dependencies

The following workspace dependencies were updated

dependencies

ipfs-cli bumped from ^0.14.1 to ^0.14.2

ipfs-core bumped from ^0.16.0 to ^0.16.1

devDependencies

interface-ipfs-core bumped from ^0.156.0 to ^0.156.1

ipfs-client bumped from ^0.9.0 to ^0.9.1

ipfs-core-types bumped from ^0.12.0 to ^0.12.1

ipfs-http-client bumped from ^58.0.0 to ^58.0.1

ipfs ipfs-v0.64.1

Dependencies

The following workspace dependencies were updated

... (truncated)

Commits

e8b7b66 chore: release master (#4221)

0cee4a4 feat!: upgrade libp2p to 0.40.x (#4237)

dfc43d4 fix: replace slice with subarray for increased performance (#4210)

acbc1c6 chore: update changelog types to add docs and deps (#4220)

d1b0a8a fix!: require IPNS V2 signatures (#4207)

d75e0a3 deps(dev): update interop suite version (#4219)

d1f1e75 chore: release master (#4218)

7304a0f chore: remove whitespace

2a830bf fix: update @multiformats/multiadd to 11.0.0

b208733 chore: release master (#4211)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by npm-service-account-ipfs, a new releaser for ipfs since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump loader-utils from 1.4.0 to 1.4.2
Bumps loader-utils from 1.4.0 to 1.4.2.

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

Commits

331ad50 chore(release): 1.4.2

17cbf8f fix: ReDoS problem (#226)

8f082b3 chore(release): 1.4.1

4504e34 fix: security problem (#220)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump minimatch and recursive-readdir
Bumps minimatch and recursive-readdir. These dependencies needed to be updated together. Updates minimatch from 3.0.4 to 3.1.2

Commits

699c459 3.1.2

2f2b5ff fix: trim pattern

25d7c0d 3.1.1

55dda29 fix: treat nocase:true as always having magic

5e1fb8d 3.1.0

f8145c5 Add 'allowWindowsEscape' option

570e8b1 add publishConfig for v3 publishes

5b7cd33 3.0.6

20b4b56 [fix] revert all breaking syntax changes

2ff0388 document, expose, and test 'partial:true' option

Additional commits viewable in compare view

Updates recursive-readdir from 2.2.2 to 2.2.3

Changelog

Sourced from recursive-readdir's changelog.

v2.2.3 - Mon, 19 Sep 2016 21:55:22 GMT

1840d5a7e58e9d8b96c217b8066077fec339de21 [fixed] updated minimatch to 3.0.5 (and added caret semver range) to address vulnerability in minimatch 3.0.4

v2.1.0 - Mon, 19 Sep 2016 21:55:22 GMT

v2.0.0 - Wed, 06 Apr 2016 04:31:02 GMT

v1.3.0 - Wed, 14 Oct 2015 14:35:55 GMT

45abf8fde380d7b1f5dc0e798d435ed50b834d9c [added] added custom matcher function to determine whether to ignore a file

eebc91c67abce413d6213e8f389ba4e0d32ffb63 [fixed] allow ignoring directories

v1.2.1 - Wed, 14 Jan 2015 16:49:55 GMT

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by bnb, a new releaser for recursive-readdir since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump file-type from 16.5.3 to 16.5.4
Bumps file-type from 16.5.3 to 16.5.4.

Release notes

Sourced from file-type's releases.

v16.5.4

Fix: Malformed MKV could cause an infinite loop https://github.com/sindresorhus/file-type/commit/d86835680f4cccbee1a60628783c36700ec9e254

CVE-2022-36313

Also fixed in 17.1.3

Commits

99cb019 17.1.2

1b10a71 Improve decoding of mime-type in ZIP file (#546)

cffcf1f Add note about ESM

6c7ac31 Update GitHub Actions (#543)

330e6b9 Enforce alphabetical order for supported file types list (#531)

093eafe Remove duplicate code (#530)

e4a809e Improve docs for fileTypeFromBlob

d0f31fe 17.1.1

d89a4a1 Improve signature ordering detection requirements (#518)

1a553e7 Update dependencies (#519)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump terser from 5.12.0 to 5.14.2
Bumps terser from 5.12.0 to 5.14.2.

Changelog

Sourced from terser's changelog.

v5.14.2

Security fix for RegExps that should not be evaluated (regexp DDOS)

Source maps improvements (#1211)

Performance improvements in long property access evaluation (#1213)

v5.14.1

keep_numbers option added to TypeScript defs (#1208)

Fixed parsing of nested template strings (#1204)

v5.14.0

Switched to @jridgewell/source-map for sourcemap generation (#1190, #1181)

Fixed source maps with non-terminated segments (#1106)

Enabled typescript types to be imported from the package (#1194)

Extra DOM props have been added (#1191)

Delete the AST while generating code, as a means to save RAM

v5.13.1

Removed self-assignments (varname=varname) (closes #1081)

Separated inlining code (for inlining things into references, or removing IIFEs)

Allow multiple identifiers with the same name in var destructuring (eg var { a, a } = x) (#1176)

v5.13.0

All calls to eval() were removed (#1171, #1184)

source-map was updated to 0.8.0-beta.0 (#1164)

NavigatorUAData was added to domprops to avoid property mangling (#1166)

v5.12.1

Fixed an issue with function definitions inside blocks (#1155)

Fixed parens of new in some situations (closes #1159)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0