PkgRadar

PyPI · pypi.org

arrayview

Py Runtime Dynamic Dangerous Import: Dynamic __import__('os') — reflection bypass for static checks.

Why PkgRadar flagged 0.26.3

SeveritySignalEvidence
highPy Runtime Dynamic Dangerous ImportDynamic __import__('os') — reflection bypass for static checks. · arrayview-0.26.3/src/arrayview/_stdio_server.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.26.3High risk352026-06-12
0.26.2High risk352026-06-11
0.26.1High risk352026-06-11
0.26.0High risk352026-06-08
0.25.1High risk352026-06-05
0.25.0High risk352026-06-05
0.24.0High risk352026-06-03

Block this in CI

PkgRadar gates arrayview (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi arrayview==0.26.3