PyPI · pypi.org
pygensuggestions
Py Runtime Dynamic Dangerous Import: Dynamic __import__('sys') — reflection bypass for static checks.
Why PkgRadar flagged 2.1.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Py Runtime Dynamic Dangerous Import | Dynamic __import__('sys') — reflection bypass for static checks. · pygensuggestions-2.1.0/pygensuggestions/__main__.py |
| medium | Py Custom Build Backend | Non-standard PEP 517 build-backend `uv_build` — runs custom code at install time. · pyproject.toml |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.1.0 | High risk | 45 | 2026-06-06 |
2.0.0 | Review | 15 | 2026-06-01 |
1.3.0 | Review | 15 | 2026-06-01 |
1.2.0 | Review | 15 | 2026-05-31 |
Block this in CI
pkgradar gate --ecosystem pypi pygensuggestions==2.1.0