PyPI · pypi.org

df-test-framework

Remote Payload: matched "curl "

Why PkgRadar flagged 4.7.3

Severity	Signal	Evidence
medium	Remote Payload	matched "curl " · df_test_framework-4.7.3/.github/workflows/scheduled.yml
medium	Remote Payload	matched "api.github.com/graphql" · df_test_framework-4.7.3/src/df_test_framework/capabilities/clients/graphql/client.py
medium	Remote Payload	matched "curl " · df_test_framework-4.7.3/src/df_test_framework/cli/templates/cicd/.gitlab-ci.yml
medium	Remote Payload	matched "curl " · df_test_framework-4.7.3/src/df_test_framework/cli/templates/cicd/.github/workflows/scheduled.yml

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`4.7.3`	Review	39	2026-05-27
`4.7.2`	Review	42	2026-05-26

Block this in CI

PkgRadar gates df-test-framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi df-test-framework==4.7.3