PkgRadar

PyPI · pypi.org

llm-routing

Py Runtime Dynamic Dangerous Import: Dynamic __import__('os') — reflection bypass for static checks.

Why PkgRadar flagged 10.1.4

SeveritySignalEvidence
highPy Runtime Dynamic Dangerous ImportDynamic __import__('os') — reflection bypass for static checks. · llm_routing-10.1.4/src/llm_router/judge.py
mediumRemote Payloadmatched "curl " · llm_routing-10.1.4/src/llm_router/hooks/start-ollama.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
10.1.4High risk472026-06-05
10.1.2High risk472026-06-05
10.1.1High risk472026-06-03
10.1.0High risk472026-06-03
10.0.0High risk472026-06-03
9.4.0High risk472026-05-30
9.3.2High risk472026-05-30
9.3.1High risk472026-05-30
9.3.0High risk472026-05-30
9.2.2High risk472026-05-30
9.2.1High risk472026-05-30

Block this in CI

PkgRadar gates llm-routing (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi llm-routing==10.1.4
Start free — 25 scans / moView full evidence