PkgRadar

PyPI · pypi.org

fused

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Why PkgRadar flagged 2.8.1

SeveritySignalEvidence
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · fused-2.8.1/fused/api/_public_api.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2.8.1Review72026-06-02

Block this in CI

PkgRadar gates fused (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi fused==2.8.1