PkgRadar

PyPI · pypi.org

novita-sandbox

Python Bun Js Exec: Python file references the Bun JavaScript runtime — cross-language execution

Why PkgRadar flagged 2.0.2

SeveritySignalEvidence
highPython Bun Js ExecPython file references the Bun JavaScript runtime — cross-language execution · novita_sandbox-2.0.2/src/novita_sandbox/core/template/main.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2.0.2High risk282026-06-09
2.0.1Low risk02026-06-08

Block this in CI

PkgRadar gates novita-sandbox (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi novita-sandbox==2.0.2