Dependency had malicious-release incident (last 90d)

Jito's assessment for RD-F-134 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No malicious-release advisory affecting jito-foundation Rust dependencies (anchor-lang 0.31.1, solana-sdk 2.3.x, spl-token 4.0, spl-stake-pool 2.0.0) identified from public GHSA feeds in the trailing 90 days (2026-01-29 to 2026-04-29).

Sources #

URL
GitHub Security Advisories (GHSA)GitHub Security Advisories: no GHSA for anchor-lang or spl-token in trailing 90 daysretrieved 2026-04-29

Methodology #

Determine whether any npm/PyPI/crates.io dependency of this protocol had a flagged malicious release in the trailing 90 days.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol jito factor RD-F-134 score green collected_at 2026-04-29 15:50:23