PkgRadar

NuGet · nuget.org

nuget.server.v2

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 3.1.2

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · NuGet.Server.V2.nuspec

Scanned versions

VersionVerdictScoreScanned (UTC)
3.4.2Low risk02026-05-29
3.4.3Low risk02026-05-29
3.3.0Low risk02026-05-29
3.1.2Review122026-05-29
3.0.0-betaReview122026-05-29
3.0.0Review122026-05-29
3.0.1Review122026-05-29
3.4.0Low risk02026-05-29
3.0.2Review122026-05-29
3.2.0Low risk02026-05-29
3.2.1Low risk02026-05-29
3.1.1Review122026-05-29
3.1.0Review122026-05-29
3.4.1Low risk02026-05-29

Block this in CI

PkgRadar gates nuget.server.v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem nuget [email protected]