PkgRadar

PyPI · pypi.org

eval-toolkit

Py Runtime Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 1.1.0

SeveritySignalEvidence
mediumPy Runtime Subprocesssubprocess call — process spawning. · eval_toolkit-1.1.0/src/eval_toolkit/manifest.py
mediumPy Runtime Subprocesssubprocess call — process spawning. · eval_toolkit-1.1.0/src/eval_toolkit/provenance.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.12.0Low risk02026-06-12
1.11.0Low risk02026-06-11
1.10.0Low risk02026-06-11
1.9.0Low risk02026-06-11
1.8.0Low risk02026-06-04
1.7.0Low risk02026-06-04
1.6.0Low risk02026-05-29
1.5.0Low risk02026-05-29
1.4.0Low risk02026-05-26
1.3.0Low risk02026-05-26
1.2.0Low risk02026-05-26
1.1.0Review402026-05-26
1.0.5Review402026-05-26
1.0.4Review402026-05-26

Block this in CI

PkgRadar gates eval-toolkit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi eval-toolkit==1.1.0