Dependency had malicious-release incident (last 90d)
Stargate Finance's assessment for RD-F-134 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No malicious release incident found for OpenZeppelin, LayerZero, or other Stargate v2 npm/package dependencies in the trailing 90 days (assessed window: Jan 26 – Apr 26, 2026). Web search and security advisory feeds show no such incidents for these specific packages.
Sources #
- Curator noteExtracted from 01-code-security.md — RD-F-134 finding; no URL cited in originalretrieved 2026-04-28
Methodology #
Determine whether any npm/PyPI/crates.io dependency of this protocol had a flagged malicious release in the trailing 90 days.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol stargate factor RD-F-134 score green collected_at 2026-04-28 01:38:41