PyPI · pypi.org
hugiml-core
Py Install Time Dynamic Dangerous Import: Dynamic __import__('sys') — reflection bypass for static checks.
Why PkgRadar flagged 1.1.10
| Severity | Signal | Evidence |
|---|---|---|
| high | Py Install Time Dynamic Dangerous Import | Dynamic __import__('sys') — reflection bypass for static checks. · hugiml_core-1.1.10/setup.py |
| medium | Py Install Time Subprocess | subprocess call — process spawning. · hugiml_core-1.1.10/setup.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.1.10 | High risk | 100 | 2026-06-12 |
1.1.9 | High risk | 100 | 2026-06-10 |
1.1.8 | High risk | 100 | 2026-06-08 |
1.1.7 | High risk | 100 | 2026-06-05 |
1.1.6 | High risk | 100 | 2026-06-04 |
1.1.5 | High risk | 100 | 2026-06-01 |
1.1.4 | High risk | 100 | 2026-05-31 |
1.1.3 | High risk | 100 | 2026-05-30 |
1.1.2 | High risk | 100 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem pypi hugiml-core==1.1.10