PkgRadar

PyPI · pypi.org

kailash-kaizen

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Why PkgRadar flagged 2.27.0

SeveritySignalEvidence
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · kaizen/llm/from_env.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2.27.0Review142026-06-11
2.26.0Review142026-06-11
2.25.0Review142026-06-11
2.24.6Review142026-06-10
2.24.5Review142026-06-01
2.24.4Review142026-06-01
2.24.3Review142026-05-28

Block this in CI

PkgRadar gates kailash-kaizen (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi kailash-kaizen==2.27.0