PyPI · pypi.org

fiftyone

Py Import Time Eval Exec: Python eval()/exec() called on a string.

Why PkgRadar flagged 1.17.0

Severity	Signal	Evidence
medium	Py Import Time Eval Exec	Python eval()/exec() called on a string. · fiftyone-1.17.0/plugins/utils/model_evaluation/__init__.py
medium	Remote Payload	matched "curl " · fiftyone-1.17.0/install.sh

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.17.0`	Review	10	2026-06-09
`1.16.0`	Review	10	2026-05-28

Block this in CI

PkgRadar gates fiftyone (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi fiftyone==1.17.0