PkgRadar

PyPI · pypi.org

itasca-mcp-bridge

Py Import Time Raw Socket: Raw socket creation at install or import time.

Why PkgRadar flagged 0.1.6

SeveritySignalEvidence
highPy Import Time Raw SocketRaw socket creation at install or import time. · itasca_mcp_bridge-0.1.6/src/itasca_mcp_bridge/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.1Low risk02026-06-11
0.1.6High risk102026-06-06
0.1.5High risk102026-06-04
0.1.4High risk102026-06-03
0.1.3High risk102026-06-03
0.1.2High risk102026-05-30

Block this in CI

PkgRadar gates itasca-mcp-bridge (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi itasca-mcp-bridge==0.1.6