PkgRadar

PyPI · pypi.org

policyengine-core

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Why PkgRadar flagged 3.27.0

SeveritySignalEvidence
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · policyengine_core-3.27.0/policyengine_core/tools/google_cloud.py

Scanned versions

VersionVerdictScoreScanned (UTC)
3.27.0Review52026-06-04

Block this in CI

PkgRadar gates policyengine-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi policyengine-core==3.27.0