PkgRadar

PyPI · pypi.org

coldtype-fontgoggles

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 1.9.4.0

SeveritySignalEvidence
mediumPy Install Time Subprocesssubprocess call — process spawning. · coldtype_fontgoggles-1.9.4.0/setup.py
mediumPy Install Time Eval ExecPython eval()/exec() called on a string. · coldtype_fontgoggles-1.9.4.0/App/setup.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.9.4.0Review952026-06-04

Block this in CI

PkgRadar gates coldtype-fontgoggles (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi coldtype-fontgoggles==1.9.4.0