PyPI · pypi.org
ob-metaflow
Remote Payload: matched "curl "
Why PkgRadar flagged 2.19.32.2
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · ob_metaflow-2.19.32.2/metaflow/plugins/pypi/micromamba.py |
| medium | Remote Payload | matched "github.com/astral-sh/uv/releases/download" · ob_metaflow-2.19.32.2/metaflow/plugins/uv/bootstrap.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.19.32.2 | Review | 15 | 2026-06-11 |
2.19.33.1 | Review | 15 | 2026-06-09 |
2.19.32.1 | Review | 15 | 2026-06-03 |
2.19.31.1 | Review | 15 | 2026-06-03 |
2.19.30.1 | Review | 15 | 2026-06-03 |
Block this in CI
pkgradar gate --ecosystem pypi ob-metaflow==2.19.32.2