PkgRadar

Go modules · proxy.golang.org

github.com/smartcontractkit/chainlink-ccip/devenv

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260616103427-7f223be047ed

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-ccip/[email protected]/blockchainutils/anvil.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-ccip/[email protected]/chainimpl/ccip-evm/impl.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616103427-7f223be047edReview302026-06-17
v0.0.0-20260616010052-ebff8af2d504Review302026-06-17
v0.0.0-20260615194913-954083f9d50eReview302026-06-16
v0.0.0-20260612233420-cdac9c74970aReview302026-06-14
v0.0.0-20260612215600-a390819a5287Review302026-06-13
v0.0.0-20260611170613-77c3fee626caReview302026-06-12
v0.0.0-20260611163547-2d4f5099e4d7Review302026-06-12
v0.0.0-20260611124652-4fed0832ff0fReview302026-06-12
v0.0.0-20260609215543-a8f1c737d28bReview302026-06-10
v0.0.0-20260609213741-dae003d56e5dReview302026-06-10
v0.0.0-20260609202757-67237efbcadfReview302026-06-10
v0.0.0-20260608180601-efa81bfdfda9Review302026-06-10
v0.0.0-20260605174232-46fd37a37998Review302026-06-06
v0.0.0-20260605020434-1f9fb0b2d9e5Review302026-06-06
v0.0.0-20260604225848-26aac19a1766Review302026-06-05
v0.0.0-20260604193942-b38acc59b271Review302026-06-05
v0.0.0-20260603002315-733b624b3216Review302026-06-04
v0.0.0-20260529173155-69b2c7b291caReview302026-05-30
v0.0.0-20260529143846-968850ee9bf9Review302026-05-30
v0.0.0-20260528230344-0db35f0a79beReview302026-05-29

Block this in CI

PkgRadar gates github.com/smartcontractkit/chainlink-ccip/devenv (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/smartcontractkit/chainlink-ccip/[email protected]