PkgRadar

PyPI · pypi.org

dagster-cloud

Py Import Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 1.13.9

SeveritySignalEvidence
mediumPy Import Time Subprocesssubprocess call — process spawning. · dagster_cloud-1.13.9/dagster_cloud/pex/grpc/server/cli/__init__.py
mediumCredential file accessmatched "aws_access_key" · dagster_cloud-1.13.9/dagster_cloud/serverless/io_manager.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.13.9Review182026-06-11
1.13.8Review312026-06-04
1.13.7Review362026-05-28

Block this in CI

PkgRadar gates dagster-cloud (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi dagster-cloud==1.13.9