PkgRadar

PyPI · pypi.org

panoptes-pocs

Py Import Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 0.8.6

SeveritySignalEvidence
mediumPy Import Time Subprocesssubprocess call — process spawning. · panoptes_pocs-0.8.6/src/panoptes/pocs/camera/__init__.py
highPy Import Time Network CallNetwork call (urllib/requests/httpx/http.client) at install or import time. · panoptes_pocs-0.8.6/src/panoptes/pocs/camera/__init__.py
mediumRemote Payloadmatched "curl " · panoptes_pocs-0.8.6/resources/arduino/install-arduino-cli.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.8.6High risk422026-06-03
0.8.5High risk422026-06-01
0.8.4High risk422026-06-01
0.8.3High risk602026-05-30

Block this in CI

PkgRadar gates panoptes-pocs (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi panoptes-pocs==0.8.6