Dependency had malicious-release incident (last 90d)

Babylon Protocol's assessment for RD-F-134 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No malicious-release incident in the trailing 90 days (as of 2026-05-04) for Cosmos SDK, CometBFT, CosmWasm/wasmd, btcd, blst, IBC-Go, or any key dependency. Babylon's go.sum cryptographic hash pinning provides protection against silent version-swapping supply chain attacks.

Sources #

URL
GitHub Security Advisories — checked for key depsGitHub security advisories (no malicious-release events for key dependencies found)retrieved 2026-05-04

Methodology #

Determine whether any npm/PyPI/crates.io dependency of this protocol had a flagged malicious release in the trailing 90 days.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol babylon-protocol factor RD-F-134 score green collected_at 2026-05-04 19:43:27