PkgRadar

PyPI · pypi.org

scitex-dev

Py Runtime Dynamic Dangerous Import: Dynamic __import__('os') — reflection bypass for static checks.

Why PkgRadar flagged 0.17.14

SeveritySignalEvidence
highPy Runtime Dynamic Dangerous ImportDynamic __import__('os') — reflection bypass for static checks. · scitex_dev-0.17.14/src/scitex_dev/_cli/ecosystem/_dashboard/_state.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.17.14High risk352026-06-13
0.17.13High risk352026-06-12
0.17.12High risk352026-06-11
0.17.11High risk352026-06-11
0.17.10High risk352026-06-10
0.17.9High risk352026-06-09
0.17.8High risk352026-06-09
0.17.7High risk352026-06-08
0.17.6High risk352026-06-06
0.17.5High risk352026-06-05
0.17.4High risk352026-06-03
0.17.3High risk352026-06-03
0.17.1High risk352026-06-03
0.17.0High risk352026-06-01
0.16.1High risk352026-05-31
0.16.0High risk352026-05-30
0.15.0High risk352026-05-30
0.14.1High risk352026-05-30
0.14.0High risk352026-05-30
0.13.1High risk352026-05-30
0.13.0High risk352026-05-30

Block this in CI

PkgRadar gates scitex-dev (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi scitex-dev==0.17.14
Start free — 25 scans / moView full evidence