SUPPLY-CHAIN REPORT

uniswap/v3-core

🦄 🦄 🦄 Core smart contracts of Uniswap v3

VERDICTCLEAN·85/100

View on GitHub →

STARS

4,978

FORKS

3,011

OPEN ISSUES

LANGUAGE

TypeScript

LICENSE

NOASSERTION

LAST PUSH

2024-11-03

SIGNALS

Historical supply-chain incidents

No known compromise, backdoor, or wallet-drainer incident in our curated DB.

Historical security advisories

No published security advisories on this repo.

WARN

Maintenance activity

Last push 529 days ago. Unmaintained code accumulates unpatched vulns.

Ecosystem trust

4,978 stars.

WARN

License

No clear license. Using an unlicensed repo in production carries legal risk.

METHODOLOGY

This report is generated on demand by querying the GitHub API for repository metadata and published security advisories, then cross-referencing our curated database of known supply-chain incidents (xz-utils, event-stream, ua-parser-js, colors.js, tj-actions, Codecov, and more). Results are cached for 24 hours. We do not scan repository code or dependencies — for that, see Snyk or Socket. Verdict: CLEAN ≥80, CAUTION 50–79, COMPROMISED<50.

SCAN A DEPLOYED SITE

Repo looks clean but the live deployment might still be exposing headers, CORS, or SSL misconfigurations.

SCAN A URL →

SCANNING uniswap/v3-core...