PkgRadar

npm · registry.npmjs.org

@chainlink/cre-sdk

Remote Dependency Spec: devDependencies.chain-selectors="https://github.com/smartcontractkit/chain-selectors.git#116ebbce88b36d4e76a03c12b3437ed33a5f9860"

Why PkgRadar flagged 1.11.0

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.chain-selectors="https://github.com/smartcontractkit/chain-selectors.git#116ebbce88b36d4e76a03c12b3437ed33a5f9860" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.11.0Review22026-06-11
1.8.0Review22026-06-11
1.9.0Review162026-06-03
1.10.0Review22026-05-28

Block this in CI

PkgRadar gates @chainlink/cre-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @chainlink/[email protected]