PyPI · pypi.org

dagster-dbt

Remote Payload: matched "curl\n"

Why PkgRadar flagged 0.29.9

Severity	Signal	Evidence
medium	Remote Payload	matched "curl\n" · dagster_dbt-0.29.9/dagster_dbt_tests/install_dbt_fusion.sh

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.29.9`	Review	14	2026-06-11
`0.29.8`	Review	14	2026-06-04
`0.29.7`	Review	15	2026-05-28

Block this in CI

PkgRadar gates dagster-dbt (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi dagster-dbt==0.29.9