PkgRadar

PyPI · pypi.org

crc-bonfire

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 6.17.0

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · crc_bonfire-6.17.0/build_deploy.sh
mediumRemote Payloadmatched "raw.githubusercontent.com" · crc_bonfire-6.17.0/cicd/bootstrap.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
6.17.0Review72026-06-10
6.16.0Review72026-06-10
6.15.0Review72026-06-09
6.14.0Review72026-06-03
6.13.3Review242026-05-27

Block this in CI

PkgRadar gates crc-bonfire (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi crc-bonfire==6.17.0