Fix-merged-but-not-deployed gap
SUNSwap (sun.io)'s assessment for RD-F-140 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No specific vulnerability fix PRs merged to GitHub repos but not deployed could be identified. GitHub repos have no public issue tracker security-patch commits visible in accessible listings. Cannot confirm absence of fix-merged-but-not-deployed gap without full commit history review.
Sources #
- GitHubsun-protocol GitHub orgsun-protocol GitHub repos — no security patch commits identifiedretrieved 2026-05-17
Methodology #
Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol sunswap factor RD-F-140 score gray collected_at 2026-05-17 14:37:31