PkgRadar

PyPI · pypi.org

openbb-core

Py Runtime Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 1.6.10

SeveritySignalEvidence
mediumPy Runtime Subprocesssubprocess call — process spawning. · openbb_core-1.6.10/openbb_core/app/static/utils/linters.py
mediumPy Runtime Subprocesssubprocess call — process spawning. · openbb_core-1.6.10/openbb_core/app/version.py
mediumPy Runtime Subprocesssubprocess call — process spawning. · openbb_core-1.6.10/openbb_core/build.py
mediumPy Runtime Eval ExecPython eval()/exec() called on a string. · openbb_core-1.6.10/openbb_core/app/static/package_builder.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.6.11Low risk02026-06-08
1.6.10Review322026-05-26

Block this in CI

PkgRadar gates openbb-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi openbb-core==1.6.10