PyPI · pypi.org

finlab

Py Import Time Os System: Direct shell invocation via os.system / os.popen / os.exec*.

Why PkgRadar flagged 2.0.13

Severity	Signal	Evidence
high	Py Import Time Os System	Direct shell invocation via os.system / os.popen / os.exec*. · finlab/ml/_qlib/__init__.py
high	Py Import Time Network Call	Network call (urllib/requests/httpx/http.client) at install or import time. · finlab/ml/_qlib/utils/__init__.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.0.13`	Review	19	2026-06-05
`2.0.12`	Review	19	2026-06-04
`2.0.11`	Review	19	2026-05-31
`2.0.10`	Review	19	2026-05-28
`2.0.9`	Review	23	2026-05-27

Block this in CI

PkgRadar gates finlab (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi finlab==2.0.13