PyPI · pypi.org

footprinter-cli

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 1.1.0

Severity	Signal	Evidence
medium	Py Install Time Subprocess	subprocess call — process spawning. · footprinter_cli-1.1.0/footprinter/cli/setup.py
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · footprinter_cli-1.1.0/footprinter/ingest/file_indexer.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.1.0`	High risk	93	2026-06-11
`1.0.5`	Review	53	2026-06-01

Campaign attribution

Part of the Shai-Hulud (PyPI) campaign.

Block this in CI

PkgRadar gates footprinter-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi footprinter-cli==1.1.0