Go modules · proxy.golang.org

github.com/smartcontractkit/chainlink/v2

Tls Verification Disabled, Remote Payload, Obfuscation Density

Why PkgRadar flagged v2.56.0-rc.0

Severity	Signal	Evidence
medium	Tls Verification Disabled	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.56.0-rc.0`	Review	24	2026-07-16
`v2.56.0-beta.0`	Review	24	2026-07-16
`v2.29.1-cre-beta.0.0.20260714171716-a1ea8cd88034`	Review	24	2026-07-16
`v2.54.5-rc.0`	Review	24	2026-07-15
`v2.54.3-rc.0`	Review	24	2026-07-15
`v2.29.1-cre-beta.0.0.20260714140112-3f1199c50293`	Review	24	2026-07-15
`v2.14.0-mercury-20240807.0.20241219065408-37d30814fda1`	Review	27	2026-07-15
`v2.0.0-20260205195942-c94fa0331841`	Review	27	2026-07-13
`v2.0.0-20260710171021-93cc5b508275`	Review	24	2026-07-12
`v2.0.0-20240708200826-697e469e41e6`	Review	36	2026-07-10
`v2.10.0-beta0.0.20240708200826-697e469e41e6`	Review	36	2026-07-10
`v2.29.1-cre-beta.0.0.20260205195942-c94fa0331841`	Review	27	2026-07-10

Block this in CI

PkgRadar gates github.com/smartcontractkit/chainlink/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/smartcontractkit/chainlink/[email protected]