PkgRadar

Pub (Dart) · pub.dev

flutterfire_cli

Dart Process Http Combo: Process spawn paired with HTTP fetch — typical fetch-and-run shape.

Why PkgRadar flagged 1.4.0

SeveritySignalEvidence
mediumDart Process Http ComboProcess spawn paired with HTTP fetch — typical fetch-and-run shape. · lib/src/commands/install.dart
mediumDart Process Http ComboProcess spawn paired with HTTP fetch — typical fetch-and-run shape. · lib/src/firebase.dart
mediumRemote Payloadmatched "raw.githubusercontent.com" · lib/src/commands/install.dart

Scanned versions

VersionVerdictScoreScanned (UTC)
1.4.0Review532026-06-04

Block this in CI

PkgRadar gates flutterfire_cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pub [email protected]