fix

.github/workflows/ci-code-review.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
           cache: 'yarn'
 
       - name: Install dependencies

.github/workflows/ci-dep-pr.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
           cache: 'yarn'
 
       - name: Install dependencies

components/governance/Vote/VoteResult.tsx

@@ -14,11 +14,11 @@ const VoteResults = ({ proposal, communityMint }: VoteResultsProps) => {
   const { t } = useTranslation(['governance'])
 
   const yesVoteCount = fmtTokenAmount(
-    proposal.getYesVoteCount() as BN,
+    proposal.getYesVoteCount() as unknown as BN,
     communityMint.decimals,
   )
   const noVoteCount = fmtTokenAmount(
-    proposal.getNoVoteCount() as BN,
+    proposal.getNoVoteCount() as unknown as BN,
     communityMint.decimals,
   )
   const totalVoteCount = yesVoteCount + noVoteCount

package.json

@@ -18,7 +18,7 @@
     "postinstall": "tar -xzC public -f vendor/charting_library.tgz;tar -xzC public -f vendor/datafeeds.tgz"
   },
   "engines": {
-    "node": ">=20.x"
+    "node": ">=20"
   },
   "dependencies": {
     "@blockworks-foundation/mango-feeds": "0.1.7",
@@ -29,6 +29,8 @@
     "@headlessui/react": "1.6.6",
     "@heroicons/react": "2.0.18",
     "@iarna/toml": "2.2.5",
+    "@metamask/base-controller": "7.0.2",
+    "@metamask/phishing-controller": "12.3.0",
     "@metaplex-foundation/js": "0.19.4",
     "@project-serum/anchor": "0.25.0",
     "@pythnetwork/client": "2.21.1",

utils/tokens.ts

@@ -14,6 +14,29 @@ import {
   JsonMetadata,
 } from '@metaplex-foundation/js'
 import { safeRace } from '@solana/promises'
+import {
+  PhishingController,
+  PhishingControllerActions,
+} from '@metamask/phishing-controller'
+import { ControllerMessenger } from '@metamask/base-controller'
+
+function getRestrictedMessenger() {
+  const controllerMessenger = new ControllerMessenger<
+    PhishingControllerActions,
+    never
+  >()
+  const messenger = controllerMessenger.getRestricted({
+    name: 'PhishingController',
+    allowedActions: [],
+    allowedEvents: [],
+  })
+  return messenger
+}
+
+const phishingControllerMessenger = getRestrictedMessenger()
+const phishingController = new PhishingController({
+  messenger: phishingControllerMessenger,
+})
 
 export class TokenAccount {
   publicKey!: PublicKey
@@ -119,9 +142,14 @@ function loadNft(
 
 export async function getNFTsByOwner(owner: PublicKey, connection: Connection) {
   const metaplex = new Metaplex(connection)
-
-  const rawNfts = await metaplex.nfts().findAllByOwner({
-    owner,
+  await phishingController.maybeUpdateState()
+  const rawNfts = (
+    await metaplex.nfts().findAllByOwner({
+      owner,
+    })
+  ).filter((x) => {
+    const isUrlSafe = !phishingController.test(x.uri).result
+    return isUrlSafe
   })
 
   const nfts = await Promise.all(