PkgRadar

PyPI · pypi.org

nodekit

Py Custom Build Backend: Non-standard PEP 517 build-backend `uv_build` — runs custom code at install time.

Why PkgRadar flagged 0.3.0.dev10

SeveritySignalEvidence
mediumPy Custom Build BackendNon-standard PEP 517 build-backend `uv_build` — runs custom code at install time. · pyproject.toml
highPy Import Time Raw SocketRaw socket creation at install or import time. · nodekit-0.3.0.dev10/src/nodekit/server/dashboard/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.0.dev10High risk242026-06-03
0.3.0.dev9High risk242026-06-02
0.3.0.dev8High risk282026-06-02
0.3.0.dev7High risk282026-06-02
0.3.0.dev6High risk282026-06-02
0.3.0.dev5High risk282026-06-02
0.3.0.dev4Review212026-06-01
0.3.0.dev3Review212026-06-01
0.3.0.dev2Review212026-06-01
0.3.0.dev1Review212026-05-31
0.2.9.dev3Review212026-05-31
0.2.9.dev2Review212026-05-31
0.2.9.dev1Review212026-05-31

Block this in CI

PkgRadar gates nodekit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi nodekit==0.3.0.dev10
Start free — 25 scans / moView full evidence