Dependency had malicious-release incident (last 90d)

Evidence summary #

No known malicious release incident in trailing 90 days affecting OZ 5.x, LayerZero OApp standard, or other direct Frax dependencies. OpenZeppelin security center checked — no active advisory for OZ 5.0.1. No npm/PyPI malicious-release incident found for these packages.

Sources #

Methodology #

Determine whether any npm/PyPI/crates.io dependency of this protocol had a flagged malicious release in the trailing 90 days.

See the full factor methodology and distribution across all protocols →