PkgRadar

PyPI · pypi.org

asqav

Py Runtime Dynamic Dangerous Import: Dynamic __import__('os') — reflection bypass for static checks.

Why PkgRadar flagged 0.5.15

SeveritySignalEvidence
highPy Runtime Dynamic Dangerous ImportDynamic __import__('os') — reflection bypass for static checks. · asqav-0.5.15/src/asqav/cli.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.5.15High risk302026-06-10
0.5.14High risk302026-06-10
0.5.13High risk302026-06-09
0.5.12High risk302026-06-08
0.5.11High risk302026-06-05
0.5.10High risk302026-06-05
0.5.9High risk302026-06-05
0.5.8High risk302026-06-05
0.5.7High risk302026-06-01
0.5.6High risk302026-06-01
0.5.5High risk302026-05-30
0.5.4High risk302026-05-30
0.5.3High risk302026-05-30

Block this in CI

PkgRadar gates asqav (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi asqav==0.5.15
Start free — 25 scans / moView full evidence