PyPI · pypi.org
tko
Remote Payload: matched "raw.githubusercontent.com"
Why PkgRadar flagged 9.17.9
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "raw.githubusercontent.com" · tko-9.17.9/src/tko/config/check_version.py |
| medium | Remote Payload | matched "raw.githubusercontent.com" · tko-9.17.9/src/tko/feno/github_url_structure.py |
| medium | Remote Payload | matched "raw.githubusercontent.com" · tko-9.17.9/src/tko/feno/link_rebase.py |
| medium | Remote Payload | matched "raw.githubusercontent.com" · tko-9.17.9/src/tko/feno/remote_md.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
9.21.0 | Low risk | 0 | 2026-06-12 |
9.20.0 | Low risk | 0 | 2026-06-09 |
9.19.0 | Low risk | 0 | 2026-06-03 |
9.18.0 | Low risk | 0 | 2026-06-03 |
9.17.4 | Low risk | 0 | 2026-05-30 |
9.17.9 | Review | 24 | 2026-05-27 |
9.17.8 | Review | 24 | 2026-05-27 |
9.17.7 | Review | 24 | 2026-05-27 |
9.17.6 | Review | 24 | 2026-05-27 |
9.17.5 | Review | 24 | 2026-05-27 |
9.17.4.dev1 | Review | 24 | 2026-05-27 |
Block this in CI
pkgradar gate --ecosystem pypi tko==9.17.9