PkgRadar

PyPI · pypi.org

pixlstash

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 1.6.0rc3

SeveritySignalEvidence
mediumPy Install Time Subprocesssubprocess call — process spawning. · pixlstash-1.6.0rc3/setup.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.6.0rc3Review502026-06-13
1.6.0rc2Review502026-06-13
1.6.0rc1Review502026-06-12
1.5.3Review502026-06-12
1.6.0.dev2Review502026-06-11
1.6.0.dev1Review502026-06-07
1.5.2Review502026-06-07
1.5.1Review502026-06-05
1.5.0Review502026-06-01
1.5.0rc4Review502026-06-01
1.5.0rc3Review502026-06-01
1.5.0rc2Review502026-06-01
1.4.2Review502026-06-01
1.5.0rc1Review502026-05-31
1.4.0Review502026-05-30
1.4.0rc1Review502026-05-30
1.4.0.dev1Review502026-05-30
1.4.0.dev0Review502026-05-30
1.4.1Review502026-05-30

Block this in CI

PkgRadar gates pixlstash (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi pixlstash==1.6.0rc3