PkgRadar

PyPI · pypi.org

archernet

Py Install Time Os System: Direct shell invocation via os.system / os.popen / os.exec*.

Why PkgRadar flagged 1.5.7

SeveritySignalEvidence
highPy Install Time Os SystemDirect shell invocation via os.system / os.popen / os.exec*. · archernet-1.5.7/setup.py
mediumPy Import Time Ctypes Loadctypes.CDLL/cdll.LoadLibrary — loads native code into the process. · archernet-1.5.7/archernet/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.5.7High risk742026-06-10
1.5.6High risk742026-06-10
1.5.5High risk742026-06-09
1.5.4High risk742026-06-09
1.5.3High risk742026-06-08
1.5.2High risk742026-06-07
1.5.1High risk742026-06-07
1.5.0High risk742026-06-06
1.4.4High risk742026-06-02
1.4.3Review242026-06-02
1.4.2High risk742026-05-30

Block this in CI

PkgRadar gates archernet (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi archernet==1.5.7
Start free — 25 scans / moView full evidence