PkgRadar

PyPI · pypi.org

modelarchive-py

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 3.2.0

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · modelarchive_py-3.2.0/modelarchive/modelcif/fix_af3.py

Scanned versions

VersionVerdictScoreScanned (UTC)
3.4.0Low risk02026-06-17
3.3.0Low risk02026-06-09
3.2.0Review122026-05-27

Block this in CI

PkgRadar gates modelarchive-py (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi modelarchive-py==3.2.0