PkgRadar

PyPI · pypi.org

chroot-distro

Py Import Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 2.1.4

SeveritySignalEvidence
mediumPy Import Time Subprocesssubprocess call — process spawning. · chroot_distro-2.1.4/src/chroot_distro/commands/login/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2.1.4Review322026-06-16
2.1.3Review322026-06-15
2.1.2Review322026-06-14
2.1.1Review322026-06-12
2.1.0Review322026-06-11
2.0.9Review322026-06-10
2.0.8Review322026-06-09
2.0.7Review322026-06-07
2.0.6Review322026-06-07
2.0.5Review322026-06-06
2.0.4Review322026-06-04
2.0.3Review322026-06-04
2.0.2Review322026-06-03
2.0.1Review322026-06-02
2.0.0Review322026-05-31
1.5.6Review322026-05-31

Block this in CI

PkgRadar gates chroot-distro (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi chroot-distro==2.1.4
Start free — 25 scans / moView full evidence