PkgRadar

PyPI · pypi.org

portada-s-index

Remote Payload: matched "curl "

Why PkgRadar flagged 0.2.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · portada_s_index-0.2.0/publish_uv.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.0Review122026-06-07
0.1.4Review122026-06-01

Block this in CI

PkgRadar gates portada-s-index (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi portada-s-index==0.2.0