PyPI · pypi.org

py-asyncutils

Py Runtime Dynamic Dangerous Import: Dynamic __import__('os') — reflection bypass for static checks.

Why PkgRadar flagged 0.9.13

Severity	Signal	Evidence
high	Py Runtime Dynamic Dangerous Import	Dynamic __import__('os') — reflection bypass for static checks. · py_asyncutils-0.9.13/asyncutils/config.py
high	Py Runtime Dynamic Dangerous Import	Dynamic __import__('sys') — reflection bypass for static checks. · py_asyncutils-0.9.13/asyncutils/constants.py
high	Py Runtime Dynamic Dangerous Import	Dynamic __import__('os') — reflection bypass for static checks. · py_asyncutils-0.9.13/asyncutils/networking.py
medium	Py Import Time Eval Exec	Python eval()/exec() called on a string. · py_asyncutils-0.9.13/asyncutils/_internal/__init__.py
medium	Py Custom Build Backend	Non-standard PEP 517 build-backend `uv_build` — runs custom code at install time. · pyproject.toml

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.9.13`	High risk	119	2026-06-12
`0.9.12`	High risk	119	2026-06-10
`0.9.11`	High risk	119	2026-06-04
`0.9.10`	High risk	119	2026-05-30

Block this in CI

PkgRadar gates py-asyncutils (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi py-asyncutils==0.9.13