PkgRadar

PyPI · pypi.org

capstone

Py Install Time Os System: Direct shell invocation via os.system / os.popen / os.exec*.

Why PkgRadar flagged 6.0.0a9

SeveritySignalEvidence
highPy Install Time Os SystemDirect shell invocation via os.system / os.popen / os.exec*. · capstone-6.0.0a9/setup.py
mediumPy Import Time Ctypes Loadctypes.CDLL/cdll.LoadLibrary — loads native code into the process. · capstone-6.0.0a9/capstone/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
6.0.0a9High risk372026-05-30
5.0.9High risk372026-05-30

Block this in CI

PkgRadar gates capstone (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi capstone==6.0.0a9