PyPI · pypi.org

rekipedia

Py Runtime Dynamic Dangerous Import: Dynamic __import__('os') — reflection bypass for static checks.

Why PkgRadar flagged 0.24.0

Severity	Signal	Evidence
high	Py Runtime Dynamic Dangerous Import	Dynamic __import__('os') — reflection bypass for static checks. · rekipedia-0.24.0/src/rekipedia/orchestrator/run_digest.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.24.0`	High risk	30	2026-06-15
`0.23.1`	High risk	30	2026-06-14
`0.23.0`	High risk	30	2026-06-13
`0.22.1`	High risk	30	2026-06-11
`0.22.0`	High risk	30	2026-06-08
`0.21.2`	High risk	30	2026-06-04
`0.21.1`	High risk	30	2026-06-03
`0.20.0`	High risk	30	2026-06-01
`0.17.27`	High risk	30	2026-05-30
`0.17.30`	High risk	30	2026-05-30
`0.17.29`	High risk	30	2026-05-30
`0.17.28`	High risk	30	2026-05-30

Block this in CI

PkgRadar gates rekipedia (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi rekipedia==0.24.0