Pub (Dart) · pub.dev
openmls
Dart Process Http Combo: Process spawn paired with HTTP fetch — typical fetch-and-run shape.
Why PkgRadar flagged 1.4.0
| Severity | Signal | Evidence |
|---|---|---|
| medium | Dart Process Http Combo | Process spawn paired with HTTP fetch — typical fetch-and-run shape. · hook/build.dart |
| medium | Remote Payload | matched "github.com/$_githubRepo/releases/download" · hook/build.dart |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.4.0 | Review | 30 | 2026-06-06 |
Block this in CI
pkgradar gate --ecosystem pub [email protected]