PkgRadar

PyPI · pypi.org

forge-next

Python Bun Js Exec: Python file references the Bun JavaScript runtime — cross-language execution

Why PkgRadar flagged 0.19.3

SeveritySignalEvidence
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · forge_next-0.19.3/scripts/shared/structural_probes.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.19.3High risk402026-06-11
0.19.2High risk402026-06-11
0.19.1Low risk02026-06-08
0.19.0Low risk02026-06-08
0.18.4Low risk02026-06-07
0.18.3Low risk02026-06-07
0.18.2Low risk02026-06-06
0.18.1Low risk02026-06-04
0.18.0Low risk02026-06-04
0.17.0Low risk02026-06-04
0.16.0Low risk02026-06-04
0.15.1Low risk02026-06-03
0.15.0Low risk02026-06-02
0.14.16Low risk02026-06-01
0.14.14Low risk02026-05-30
0.14.13Low risk02026-05-30
0.14.12Low risk02026-05-30
0.14.11Low risk02026-05-30
0.14.9Low risk02026-05-30
0.14.8Low risk02026-05-29
0.14.7Low risk02026-05-29
0.14.6Low risk02026-05-29
0.14.2Low risk02026-05-28
0.14.1Low risk02026-05-28

Block this in CI

PkgRadar gates forge-next (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi forge-next==0.19.3
Start free — 25 scans / moView full evidence