PyPI · pypi.org
metaflow
Remote Payload: matched "curl "
Why PkgRadar flagged 2.19.33
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · metaflow-2.19.33/metaflow/plugins/pypi/micromamba.py |
| medium | Remote Payload | matched "github.com/astral-sh/uv/releases/download" · metaflow-2.19.33/metaflow/plugins/uv/bootstrap.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.19.33 | Review | 9 | 2026-06-09 |
2.19.32 | Review | 9 | 2026-06-03 |
2.19.31 | Review | 9 | 2026-06-01 |
2.19.30 | Review | 15 | 2026-05-29 |
Block this in CI
pkgradar gate --ecosystem pypi metaflow==2.19.33