@lukso/lsp8-contracts 0.16.3 → 0.16.4

package/README.md

@@ -2,6 +2,8 @@
 
 Package for the LSP8 Identifiable Digital Asset Standard.
 
+> The contracts [`LSP8Votes`](contracts/extensions/LSP8Votes.sol) and [`LSP8VotesInitiAbstract`](contracts/extensions/LSP8VotesInitAbstract.sol) have not been formally audited by an external third party and are not recommended to be used in production without undergoing an independent security audit.
+
 ## Installation
 
 ```console

package/contracts/LSP8IdentifiableDigitalAsset.sol

@@ -759,6 +759,8 @@ abstract contract LSP8IdentifiableDigitalAsset is
      * - `tokenId` must exist.
      *
      * @custom:events {Transfer} event with `address(0)` as the `to` address.
+     *
+     * @custom:warning This internal function does not check if the sender is authorized or not to operate on the `tokenId`.
      */
     function _burn(bytes32 tokenId, bytes memory data) internal virtual {
         address tokenOwner = tokenOwnerOf(tokenId);
@@ -815,7 +817,7 @@ abstract contract LSP8IdentifiableDigitalAsset is
      *
      * @custom:events {Transfer} event.
      *
-     * @custom:danger This internal function does not check if the sender is authorized or not to operate on the `tokenId`.
+     * @custom:warning This internal function does not check if the sender is authorized or not to operate on the `tokenId`.
      */
     function _transfer(
         address from,

package/contracts/LSP8IdentifiableDigitalAssetInitAbstract.sol

@@ -776,6 +776,8 @@ abstract contract LSP8IdentifiableDigitalAssetInitAbstract is
      * - `tokenId` must exist.
      *
      * @custom:events {Transfer} event with `address(0)` as the `to` address.
+     *
+     * @custom:warning This internal function does not check if the sender is authorized or not to operate on the `tokenId`.
      */
     function _burn(bytes32 tokenId, bytes memory data) internal virtual {
         address tokenOwner = tokenOwnerOf(tokenId);
@@ -832,7 +834,7 @@ abstract contract LSP8IdentifiableDigitalAssetInitAbstract is
      *
      * @custom:events {Transfer} event.
      *
-     * @custom:danger This internal function does not check if the sender is authorized or not to operate on the `tokenId`.
+     * @custom:warning This internal function does not check if the sender is authorized or not to operate on the `tokenId`.
      */
     function _transfer(
         address from,

package/contracts/extensions/LSP8Votes.sol

@@ -19,6 +19,10 @@ import {LSP1Utils} from "@lukso/lsp1-contracts/contracts/LSP1Utils.sol";
  * Tokens do not count as votes until they are delegated, because votes must be tracked which incurs an additional cost
  * on every transfer. Token holders can either delegate to a trusted representative who will decide how to make use of
  * the votes in governance decisions, or they can delegate to themselves to be their own representative.
+ *
+ * @custom:warning This extension contract is not formally audited.
+ * For any contract intended to be deployed in production that inherits from this extension, it is recommended to conduct
+ * an independent security audit, including this extension in the audit scope.
  */
 abstract contract LSP8Votes is LSP8IdentifiableDigitalAsset, Votes {
     /**

package/contracts/extensions/LSP8VotesInitAbstract.sol

@@ -20,6 +20,10 @@ import {LSP1Utils} from "@lukso/lsp1-contracts/contracts/LSP1Utils.sol";
  * Tokens do not count as votes until they are delegated, because votes must be tracked which incurs an additional cost
  * on every transfer. Token holders can either delegate to a trusted representative who will decide how to make use of
  * the votes in governance decisions, or they can delegate to themselves to be their own representative.
+ *
+ * @custom:warning This extension contract is not formally audited.
+ * For any contract intended to be deployed in production that inherits from this extension, it is recommended to conduct
+ * an independent security audit, including this extension in the audit scope.
  */
 abstract contract LSP8VotesInitAbstract is
     LSP8IdentifiableDigitalAssetInitAbstract,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lukso/lsp8-contracts",
-  "version": "0.16.3",
+  "version": "0.16.4",
   "description": "Package for the LSP8 Identifiable Digital Asset standard",
   "license": "Apache-2.0",
   "author": "",
@@ -47,7 +47,7 @@
   "scripts": {
     "build": "hardhat compile --show-stack-traces",
     "build:js": "unbuild",
-    "build:types": "npx wagmi generate",
+    "build:types": "wagmi generate",
     "clean": "hardhat clean && rm -Rf dist/ cache/ node_modules/ .turbo/ types/ typechain/ build/ artifacts/",
     "format": "prettier --write .",
     "lint": "eslint . --ext .ts,.js",