PkgRadar

Pub (Dart) · pub.dev

mastodon

Remote Payload: matched "cUrl "

Why PkgRadar flagged 1.0.0-beta.13

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · lib/src/model/reaction.dart
mediumRemote Payloadmatched "cUrl " · lib/src/model/reaction.g.dart
mediumRemote Payloadmatched "cUrl " · lib/src/model/custom_emoji.dart
mediumRemote Payloadmatched "cUrl " · lib/src/model/custom_emoji.g.dart

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0-beta.13High risk482026-06-09
1.0.0-beta.12High risk482026-06-07
1.0.0-beta.11High risk482026-06-07
1.0.0-beta.10High risk482026-06-05
1.0.0-beta.9Review482026-05-31

Block this in CI

PkgRadar gates mastodon (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pub [email protected]