PkgRadar

PyPI · pypi.org

coding-academy-lecture-manager

Remote Payload: matched "github.com/svenstaro/miniserve/releases/download"

Why PkgRadar flagged 1.6.2

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/svenstaro/miniserve/releases/download" · coding_academy_lecture_manager-1.6.2/src/clm/workers/jupyterlite/miniserve.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.13.0Low risk02026-06-12
1.12.0Low risk02026-06-11
1.11.0Low risk02026-06-10
1.10.0Low risk02026-06-08
1.9.2Low risk02026-06-08
1.9.1Low risk02026-06-07
1.9.0Low risk02026-06-06
1.8.4Low risk02026-06-06
1.8.3Low risk02026-06-06
1.8.2Low risk02026-06-05
1.8.1Low risk02026-06-05
1.8.0Low risk02026-06-05
1.7.0Low risk02026-06-03
1.6.2Review122026-05-26

Block this in CI

PkgRadar gates coding-academy-lecture-manager (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi coding-academy-lecture-manager==1.6.2