PyPI · pypi.org
byquant-core
Py Import Time Subprocess: subprocess call — process spawning.
Why PkgRadar flagged 2.6.6.501
| Severity | Signal | Evidence |
|---|---|---|
| medium | Py Import Time Subprocess | subprocess call — process spawning. · byquant_core-2.6.6.501/venv312/Lib/site-packages/docutils/writers/odf_odt/__init__.py |
| medium | Py Import Time Subprocess | subprocess call — process spawning. · byquant_core-2.6.6.501/venv312/Lib/site-packages/jaraco/context/__init__.py |
| medium | Py Import Time Eval Exec | Python eval()/exec() called on a string. · byquant_core-2.6.6.501/etfvenv/Lib/site-packages/pip/_vendor/packaging/licenses/__init__.py |
| medium | Py Import Time Eval Exec | Python eval()/exec() called on a string. · byquant_core-2.6.6.501/etfvenv/Lib/site-packages/pip/_vendor/pkg_resources/__init__.py |
| medium | Py Import Time Eval Exec | Python eval()/exec() called on a string. · byquant_core-2.6.6.501/venv312/Lib/site-packages/jaraco/functools/__init__.py |
| medium | Py Import Time Eval Exec | Python eval()/exec() called on a string. · byquant_core-2.6.6.501/venv312/Lib/site-packages/packaging/licenses/__init__.py |
| medium | Py Import Time Eval Exec | Python eval()/exec() called on a string. · byquant_core-2.6.6.501/venv312/Lib/site-packages/pip/_vendor/packaging/licenses/__init__.py |
| medium | Py Import Time Eval Exec | Python eval()/exec() called on a string. · byquant_core-2.6.6.501/venv312/Lib/site-packages/pip/_vendor/pkg_resources/__init__.py |
| high | Py Import Time Network Call | Network call (urllib/requests/httpx/http.client) at install or import time. · byquant_core-2.6.6.501/venv312/Lib/site-packages/jaraco/context/__init__.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.6.6.501 | High risk | 164 | 2026-06-05 |
Block this in CI
pkgradar gate --ecosystem pypi byquant-core==2.6.6.501