PkgRadar

PyPI · pypi.org

ipp-lang

Py Runtime Dynamic Dangerous Import: Dynamic __import__('sys') — reflection bypass for static checks.

Why PkgRadar flagged 2.0.14

SeveritySignalEvidence
highPy Runtime Dynamic Dangerous ImportDynamic __import__('sys') — reflection bypass for static checks. · ipp_lang-2.0.14/ipp/runtime/builtins.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2.0.14High risk302026-06-17
2.0.13High risk302026-06-17
2.0.12High risk302026-06-16
2.0.11Low risk02026-06-16
2.0.10Low risk02026-06-15
2.0.8.3Low risk02026-06-14
2.0.8.2Low risk02026-06-14
2.0.8Low risk02026-06-13
2.0.6Low risk02026-06-13
2.0.5Low risk02026-06-11
2.0.4Low risk02026-06-09
2.0.0.4Low risk02026-06-08
2.0.0.3Low risk02026-06-08
2.0.0.2Low risk02026-06-08
2.0.0.1Low risk02026-06-08
2.4.0Low risk02026-06-06
1.9.13Low risk02026-06-06
1.9.12Low risk02026-06-06
1.9.9Low risk02026-06-06
1.9.8Low risk02026-06-06
1.9.7Low risk02026-06-06
1.9.6Low risk02026-06-06
1.9.5Low risk02026-06-05
1.9.4Low risk02026-06-02
1.9.3Low risk02026-06-02
1.9.2Low risk02026-06-01
1.9.1.1Low risk02026-06-01
1.9.1Low risk02026-06-01
1.9.0.1Low risk02026-06-01
1.9.0Low risk02026-05-31
1.8.8Low risk02026-05-31
1.8.7Low risk02026-05-31
1.8.6.1Low risk02026-05-31
1.8.6Review272026-05-28
1.8.5Review272026-05-28
1.8.4Review272026-05-27

Block this in CI

PkgRadar gates ipp-lang (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi ipp-lang==2.0.14
Start free — 25 scans / moView full evidence