PkgRadar

Go modules · proxy.golang.org

github.com/smartcontractkit/chainlink-deployments-framework

Remote Payload: matched "CURL "

Why PkgRadar flagged v0.111.2-0.20260616060730-e389ad2f0f7e

SeveritySignalEvidence
mediumRemote Payloadmatched "CURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/chain/aptos/provider/rpc_provider.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/chain/evm/provider/confirm_functor.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/chain/evm/provider/seth_client.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/chain/stellar/provider/ctf_provider.go
mediumRemote Payloadmatched "CURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/chain/stellar/provider/rpc_provider.go
mediumRemote Payloadmatched "CURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/chain/sui/provider/rpc_provider.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/engine/cld/catalog/catalog.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/engine/cld/chains/chains.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/engine/cld/commands/mcms/error_diagnosis.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/engine/cld/commands/mcms/layout/layout_mutations.go
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e/engine/cld/environment/anvil.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.111.2-0.20260616060730-e389ad2f0f7eHigh risk1032026-06-17
v0.111.1-0.20260612191326-e31c0ae4cd54High risk1032026-06-17
v0.111.1High risk1032026-06-16
v0.111.0High risk1032026-06-13
v0.110.0High risk1032026-06-10
v0.109.1-0.20260605070359-6a2444fc3ae7High risk1032026-06-06
v0.109.1-0.20260604174622-e26b8cddfa0aHigh risk1132026-06-06
v0.109.0High risk1032026-06-03
v0.108.0Review1032026-05-30

Block this in CI

PkgRadar gates github.com/smartcontractkit/chainlink-deployments-framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/smartcontractkit/chainlink-deployments-framework@v0.111.2-0.20260616060730-e389ad2f0f7e