PkgRadar

PyPI · pypi.org

browser-use

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 0.13.0

SeveritySignalEvidence
mediumPy Install Time Subprocesssubprocess call — process spawning. · browser_use-0.13.0/browser_use/skill_cli/commands/setup.py
highPy Runtime Dynamic Dangerous ImportDynamic __import__('os') — reflection bypass for static checks. · browser_use-0.13.0/browser_use/skill_cli/python_session.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.13.0High risk422026-06-08
0.13.0rc4High risk422026-06-08
0.13.0rc3High risk422026-06-08
0.13.0rc2High risk422026-06-08

Block this in CI

PkgRadar gates browser-use (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi browser-use==0.13.0