PyPI · pypi.org
nlp2cmd
Py Import Time Subprocess: subprocess call — process spawning.
Why PkgRadar flagged 1.1.18
| Severity | Signal | Evidence |
|---|---|---|
| medium | Py Import Time Subprocess | subprocess call — process spawning. · nlp2cmd-1.1.18/src/nlp2cmd/nlp_enhanced/__init__.py |
| high | Py Runtime Dynamic Dangerous Import | Dynamic __import__('os') — reflection bypass for static checks. · nlp2cmd-1.1.18/src/nlp2cmd/plan_execution/plan_executor.py |
| high | Py Runtime Dynamic Dangerous Import | Dynamic __import__('os') — reflection bypass for static checks. · nlp2cmd-1.1.18/src/nlp2cmd/plan_execution/step_orchestrator.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.1.18 | High risk | 87 | 2026-06-05 |
1.1.17 | High risk | 87 | 2026-06-05 |
1.1.16 | High risk | 87 | 2026-06-05 |
1.1.15 | High risk | 87 | 2026-06-05 |
1.1.14 | High risk | 87 | 2026-06-05 |
1.1.13 | High risk | 129 | 2026-06-04 |
1.1.12 | High risk | 129 | 2026-06-04 |
1.1.11 | High risk | 129 | 2026-06-04 |
Block this in CI
pkgradar gate --ecosystem pypi nlp2cmd==1.1.18