Pub (Dart) · pub.dev
flutter_taglib
Dart Process Http Combo: Process spawn paired with HTTP fetch — typical fetch-and-run shape.
Why PkgRadar flagged 1.3.1
| Severity | Signal | Evidence |
|---|---|---|
| medium | Dart Process Http Combo | Process spawn paired with HTTP fetch — typical fetch-and-run shape. · hook/build.dart |
| medium | Remote Payload | matched "github.com/axel10/flutter_taglib/releases/download" · lib/src/flutter_taglib_bindings.dart |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.3.1 | Review | 30 | 2026-06-10 |
1.3.0 | Review | 30 | 2026-06-10 |
1.2.0 | Review | 18 | 2026-06-03 |
Block this in CI
pkgradar gate --ecosystem pub [email protected]