PkgRadar

PyPI · pypi.org

keeps-learn-nexus-proto

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 0.21.0

SeveritySignalEvidence
mediumPy Install Time Subprocesssubprocess call — process spawning. · keeps_learn_nexus_proto-0.21.0/setup.py
highCredential File Packagedkeeps_learn_nexus_proto-0.21.0/.npmrc · keeps_learn_nexus_proto-0.21.0/.npmrc

Scanned versions

VersionVerdictScoreScanned (UTC)
0.21.0High risk592026-06-11
0.20.0High risk592026-05-30
0.19.0High risk592026-05-30

Block this in CI

PkgRadar gates keeps-learn-nexus-proto (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi keeps-learn-nexus-proto==0.21.0