PkgRadar

npm · registry.npmjs.org

@exodus/solana-web3.js

Remote Dependency Spec: devDependencies.@types/exodus__secp256k1="https://registry.npmjs.org/@types/secp256k1/-/secp256k1-4.0.3.tgz"

Why PkgRadar flagged 1.63.1-exodus.9-rc4

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.@types/exodus__secp256k1="https://registry.npmjs.org/@types/secp256k1/-/secp256k1-4.0.3.tgz" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.63.1-exodus.9-rc4Review42026-06-08
1.63.1-exodus.9-rc5Review42026-06-08
1.63.1-exodus.9-rc6Review42026-05-27
1.63.1-exodus.9-rc7Review42026-05-27

Block this in CI

PkgRadar gates @exodus/solana-web3.js (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @exodus/[email protected]