Packages scanned
26,703
Coverage pub
Pub (Dart) pub.dev
Dart / Flutter. Pub packages can ship build_runner code generators that execute at consumer build time, plus dart:ffi native library loads. The package archive is fetched from pub.dev and walked for indicator filenames and cross-language exec/network/exfil string signals.
High risk
8
Review
1,470
High-severity findings
8
Last scan
4m ago
Install-time attack surface
build_runner generators, dart:ffi native loads, and arbitrary `scripts` in pubspec.yaml
Supported lockfile formats
pubspec.lock
Spec format
pkgradar gate --ecosystem pub [email protected]Recent activity
The corpus-wide release feed lives on /campaigns. A per-ecosystem release feed for Pub (Dart) is on the roadmap — the stats above are filtered to this ecosystem in the meantime.
Other ecosystems