PkgRadar

PyPI · pypi.org

deeptutor

Remote Payload: matched "github.com/FiloSottile/mkcert/releases/download"

Why PkgRadar flagged 1.4.4

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/FiloSottile/mkcert/releases/download" · deeptutor_web/node_modules/next/dist/lib/mkcert.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.4.4Review122026-06-12
1.4.3Review122026-06-12
1.4.2Review122026-05-30
1.4.1Review122026-05-30

Block this in CI

PkgRadar gates deeptutor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi deeptutor==1.4.4