However, it was only a 250 ml container and was ordered and received over a year ago. Is there any chance I will have someone knocking on my door?
I wouldn't sweat it too much. First of all, it's unclear whether the authorities would even be able to identify you. Pelchat's "privacy policy" stated that they didn't keep a record of your address after they shipped your order, they just kept a spreadsheet with your name and the date your order was shipped. (I'll assume that the same policy applied to orders from the "affiliates.") A name by itself isn't much good.
Second, even if they got your address (let's say Pelchat did keep a record of it, or maybe the authorities were able to get records from Pelchat's credit card processor), that still doesn't seem like enough evidence of wrongdoing on your part. What if somebody stole your credit card number and then stole the package off your porch when it was delivered? What if somebody sent the package to you as a surprise gift? What if someone sent the package in an attempt to get you in trouble with the law? That's why law enforcement does controlled deliveries when they find drugs in the mail... they need to eliminate those possibilities.
Third, I've only heard of controlled deliveries being used to bust Pelchat customers. If you only ordered once, and you've already received your order, there's nothing for the authorities to deliver to you.
Finally, this crackdown has focused on "big fish" like Pelchat and mid-level dealers who were using Pelchat and others for their supply. Soneone who only ordered 250 ml doesn't sound like a dealer.
If were you, I'd play it safe and dump any remaining GBL down the drain. I'd also make sure that my house had no illegal substances in it. And if the DEA did contact me (say, for a voluntary interview), I'd politely refer them to my attorney. But really, I wouldn't worry too much. Good luck!
[ 23 September 2002: Message edited by: Icy Blow'lude ]