PyPI · pypi.org

p4p

Py Name Typosquat: Name `p4p` is one edit away from popular package `pip` — likely typosquat.

Why PkgRadar flagged 4.2.3a1

Severity	Signal	Evidence
high	Py Name Typosquat	Name `p4p` is one edit away from popular package `pip` — likely typosquat.
medium	Py Import Time Eval Exec	Python eval()/exec() called on a string. · p4p-4.2.3a1/src/p4p/asLib/__init__.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`4.2.3a1`	High risk	32	2026-06-10

Block this in CI

PkgRadar gates p4p (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi p4p==4.2.3a1