PkgRadar

PyPI · pypi.org

lstchain

Remote Payload: matched "wget "

Why PkgRadar flagged 0.12.2

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · lstchain-0.12.2/download_test_data.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.12.2Review62026-06-15
0.12.1Review62026-06-08
0.12.0Review62026-05-29

Block this in CI

PkgRadar gates lstchain (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi lstchain==0.12.2