PkgRadar

PyPI · pypi.org

blaxel

Python Bun Js Exec: Python file references the Bun JavaScript runtime — cross-language execution

Why PkgRadar flagged 0.2.55

SeveritySignalEvidence
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · blaxel-0.2.55/src/blaxel/core/image/image.py
highPy Import Time Network CallNetwork call (urllib/requests/httpx/http.client) at install or import time. · blaxel-0.2.55/src/blaxel/core/jobs/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.55High risk282026-06-10
0.2.54High risk82026-05-30

Block this in CI

PkgRadar gates blaxel (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi blaxel==0.2.55