PyPI · pypi.org

bibpublish

Py Import Time Eval Exec: Python eval()/exec() called on a string.

Why PkgRadar flagged 1.0.2

Severity	Signal	Evidence
medium	Py Import Time Eval Exec	Python eval()/exec() called on a string. · bibpublish-1.0.2/src/bibpublish/templates/web/__init__.py
medium	Py Import Time Eval Exec	Python eval()/exec() called on a string. · bibpublish-1.0.2/src/bibpublish/templates/wordpress/__init__.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.0.2`	Review	48	2026-06-01

Block this in CI

PkgRadar gates bibpublish (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi bibpublish==1.0.2