CHW-5310 ArtifactScanPending

Internal / Storage Updated

the firewall is still scanning this package's contents and will not serve it unscanned; retry shortly

Default message: the firewall is still scanning this package’s contents and will not serve it unscanned; retry shortly
HTTP status: 503 (server)

Problem. A package download was refused with 503. Cause. The proxy scans a package’s contents (install scripts, known-malicious code patterns, import-time execution) before serving it. That scan did not finish within its time budget (3 s plus 1 s per 10 MB), or every scan slot was busy for 2 s. The proxy refuses rather than serve contents it has not inspected. This is not a verdict about the package. Fix. Retry; package managers retry 503 on their own. The scan keeps running, and the retry is answered from its result. If it persists, operators should check CPU on the proxy; the request is recorded with reason artifact_scan_pending. HTTP 503, with Retry-After.