PkgRadar

PyPI · pypi.org

bithuman

Large Native Blob: 9644128 bytes

Why PkgRadar flagged 2.3.8

SeveritySignalEvidence
mediumLarge Native Blob9644128 bytes · bithuman/.dylibs/libavcodec.62.28.101.dylib
mediumLarge Native Blob18097504 bytes · bithuman/.dylibs/libonnxruntime.1.26.0.dylib
mediumLarge Native Blob7476432 bytes · bithuman/.dylibs/libx265.216.dylib

Scanned versions

VersionVerdictScoreScanned (UTC)
2.3.8Review302026-06-16
2.3.4Review302026-06-12
2.3.3.post1Review302026-06-10
2.3.3Review302026-06-01
2.3.2Low risk02026-05-29
2.3.1Low risk02026-05-29
2.3.0Low risk02026-05-28

Block this in CI

PkgRadar gates bithuman (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi bithuman==2.3.8