Fork of restclient guarding uses of eval
Another IRC user, technomancy, created a fork of restclient today after noticing some evals.
Here's the new repository: https://git.sr.ht/~technomancy/restclient.el
The delta is small, simply guarding these behind options (which can be setup per "trusted" file/buffer). I'm sure he'd be interested in your further thoughts if you happen to be an IRC user; I'm not sure how much work he plans to put into this other than immediately offering "a simple fix" believing the package might be somewhat undermaintained currently.
--more--