PkgRadar

PyPI · pypi.org

rapyuta-io-cli

Py Import Time Os System: Direct shell invocation via os.system / os.popen / os.exec*.

Why PkgRadar flagged 10.6.0

SeveritySignalEvidence
highPy Import Time Os SystemDirect shell invocation via os.system / os.popen / os.exec*. · rapyuta_io_cli-10.6.0/riocli/completion/__init__.py
mediumPy Import Time Subprocesssubprocess call — process spawning. · rapyuta_io_cli-10.6.0/riocli/utils/__init__.py
highPy Import Time Network CallNetwork call (urllib/requests/httpx/http.client) at install or import time. · rapyuta_io_cli-10.6.0/riocli/utils/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
10.6.0High risk542026-06-11
10.5.0High risk542026-06-03

Block this in CI

PkgRadar gates rapyuta-io-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi rapyuta-io-cli==10.6.0