PkgRadar

Pub (Dart) · pub.dev

powersync

Dart Process Http Combo: Process spawn paired with HTTP fetch — typical fetch-and-run shape.

Why PkgRadar flagged 2.3.0

SeveritySignalEvidence
mediumDart Process Http ComboProcess spawn paired with HTTP fetch — typical fetch-and-run shape. · hook/build.dart
mediumRemote Payloadmatched "github.com/powersync-ja/powersync.dart/releases/download" · lib/src/setup/web.dart

Scanned versions

VersionVerdictScoreScanned (UTC)
2.3.0Review302026-06-10

Block this in CI

PkgRadar gates powersync (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pub [email protected]