PkgRadar

PyPI · pypi.org

easy-tdx

Py Runtime Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 1.3.1

SeveritySignalEvidence
mediumPy Runtime Subprocesssubprocess call — process spawning. · easy_tdx-1.3.1/scripts/ruff_hook.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.11.6Low risk02026-06-13
1.11.5Low risk02026-06-13
1.11.1Low risk02026-06-12
1.10.5Low risk02026-06-12
1.10.2Low risk02026-06-12
1.10.0Low risk02026-06-11
1.9.10Low risk02026-06-11
1.9.9Low risk02026-06-10
1.9.8Low risk02026-06-10
1.9.7Low risk02026-06-10
1.9.6Low risk02026-06-10
1.9.5Low risk02026-06-10
1.9.4Low risk02026-06-09
1.9.3Low risk02026-06-09
1.9.2Low risk02026-06-09
1.9.1Low risk02026-06-09
1.9.0Low risk02026-06-09
1.8.2Low risk02026-06-09
1.8.1Low risk02026-06-09
1.8.0Low risk02026-06-09
1.7.1Low risk02026-06-07
1.7.0Low risk02026-06-07
1.6.1Low risk02026-06-07
1.6.0Low risk02026-06-07
1.5.0Low risk02026-06-02
1.4.3Low risk02026-05-28
1.4.2Low risk02026-05-28
1.4.1Low risk02026-05-28
1.4.0Low risk02026-05-28
1.3.1Review252026-05-26

Block this in CI

PkgRadar gates easy-tdx (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi easy-tdx==1.3.1
Start free — 25 scans / moView full evidence