PkgRadar

PyPI · pypi.org

flowra

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.0.69

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · flowra-0.0.69/tools/sync_pricing.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.71Low risk02026-06-16
0.0.70Low risk02026-06-04
0.0.69Review202026-05-27
0.0.68Review352026-05-26

Block this in CI

PkgRadar gates flowra (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi flowra==0.0.69