PyPI · pypi.org

churchsong

Py Import Time Network Call: Network call (urllib/requests/httpx/http.client) at install or import time.

Why PkgRadar flagged 0.11.5

Severity	Signal	Evidence
high	Py Import Time Network Call	Network call (urllib/requests/httpx/http.client) at install or import time. · churchsong-0.11.5/src/churchsong/churchtools/__init__.py
medium	Py Custom Build Backend	Non-standard PEP 517 build-backend `uv_build` — runs custom code at install time. · pyproject.toml

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.11.5`	High risk	15	2026-06-07
`0.11.4`	High risk	15	2026-05-31
`0.11.3`	High risk	15	2026-05-30

Block this in CI

PkgRadar gates churchsong (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi churchsong==0.11.5