PkgRadar

PyPI · pypi.org

batplot

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 1.8.40

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · batplot-1.8.40/batplot/version_check.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.8.42Low risk02026-06-12
1.8.41Low risk02026-06-12
1.8.40Review82026-05-27

Block this in CI

PkgRadar gates batplot (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi batplot==1.8.40