PkgRadar

PyPI · pypi.org

czsc

Py Import Time Eval Exec: Python eval()/exec() called on a string.

Why PkgRadar flagged 1.0.0rc8

SeveritySignalEvidence
mediumPy Import Time Eval ExecPython eval()/exec() called on a string. · czsc-1.0.0rc8/czsc/utils/__init__.py
highPy Import Time Network CallNetwork call (urllib/requests/httpx/http.client) at install or import time. · czsc-1.0.0rc8/czsc/fsa/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0rc8Review122026-05-29

Block this in CI

PkgRadar gates czsc (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi czsc==1.0.0rc8