Fix-merged-but-not-deployed gap
Rocket Pool's assessment for RD-F-140 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No documented case of a security-relevant PR merged but not deployed. April 17, 2026 commits (post-Saturn One) are test timing fixes and branch merges, not undeployed security fixes. No open security advisories in the GitHub repo. Protocol has no known unpatched vulnerabilities at assessment date.
Sources #
- GitHubCommits - rocket-pool/rocketpoolLatest commits are test fixes, not security fixes awaiting deploymentretrieved 2026-05-04
Methodology #
Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol rocket-pool factor RD-F-140 score green collected_at 2026-05-04 15:40:28