PkgRadar

Go modules · proxy.golang.org

github.com/smartcontractkit/chainlink/devenv

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260615190125-9c63b5d04d36

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/smartcontractkit/chainlink/[email protected]/products/evm.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615190125-9c63b5d04d36Review212026-06-16
v0.0.0-20260615170847-253319c68f3cReview212026-06-16
v0.0.0-20260615100211-fd166436db0aReview212026-06-16
v0.0.0-20260612160618-3497462e582eReview212026-06-13
v0.0.0-20260611222710-24802f7e37a4Review212026-06-12
v0.0.0-20260611184646-08ca52a5c20fReview212026-06-12
v0.0.0-20260611163050-af5512049c60Review212026-06-12
v0.0.0-20260610163721-8c69c710a95fReview212026-06-11
v0.0.0-20260610145603-12c8729230e1Review212026-06-11
v0.0.0-20260610125215-d205a7a60784Review212026-06-11
v0.0.0-20260609214348-8a67a6db6588Review212026-06-11
v0.0.0-20260609013241-dc1d367faaf4Review212026-06-10
v0.0.0-20260608083400-7518caa85f36Review212026-06-09
v0.0.0-20260603184909-5abc313fafc8Review212026-06-05
v0.0.0-20260602124023-f8867abadf48Review212026-06-03
v0.0.0-20260601214114-c5dbe0633bf7Review212026-06-03
v0.0.0-20260529143830-9e6be79b8f13Review212026-05-31

Block this in CI

PkgRadar gates github.com/smartcontractkit/chainlink/devenv (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/smartcontractkit/chainlink/[email protected]
Start free — 25 scans / moView full evidence