PkgRadar

PyPI · pypi.org

mirror-py

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 1.1.5

SeveritySignalEvidence
mediumPy Install Time Subprocesssubprocess call — process spawning. · mirror_py-1.1.5/mirror/command/setup.py
mediumPy Import Time Subprocesssubprocess call — process spawning. · mirror_py-1.1.5/mirror/toolbox/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.5Review412026-06-01
1.1.4Review412026-05-30
1.1.3Review412026-05-30
1.1.3rc1Review412026-05-30
1.1.2Review412026-05-30
1.1.2rc1Review412026-05-30
1.1.1Review412026-05-30
1.1.1rc1Review412026-05-30
1.1.0Review412026-05-30
1.1.0rc2Review412026-05-30
1.0.1rc5Review412026-05-30
1.0.1rc4Review412026-05-30
1.0.1rc3Review412026-05-30
1.1.0rc1Review412026-05-30

Block this in CI

PkgRadar gates mirror-py (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi mirror-py==1.1.5
Start free — 25 scans / moView full evidence