PkgRadar

Pub (Dart) · pub.dev

quickpatch_cli

Remote Payload: matched "github.com/google/bundletool/releases/download"

Why PkgRadar flagged 1.6.124

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/google/bundletool/releases/download" · lib/src/cache.dart

Scanned versions

VersionVerdictScoreScanned (UTC)
1.6.124Review122026-06-08
1.6.123Review122026-06-08
1.6.122Review122026-06-08
1.6.121Review122026-06-07
1.6.120Review122026-06-07
1.6.119Review122026-06-07
1.6.118Review122026-06-04
1.6.117Review122026-06-03
1.6.116Review122026-06-02
1.6.115Review122026-06-02
1.6.114Review122026-06-02
1.6.113Review122026-06-02
1.6.112Review122026-05-30
1.6.111Review122026-05-30

Block this in CI

PkgRadar gates quickpatch_cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pub [email protected]
Start free — 25 scans / moView full evidence