PkgRadar

PyPI · pypi.org

sculblog

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 0.2.9

SeveritySignalEvidence
mediumPy Install Time Subprocesssubprocess call — process spawning. · sculblog-0.2.9/setup.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.9Review252026-05-27
0.2.8Review252026-05-27
0.2.6Review252026-05-27
0.2.5Review252026-05-27
0.2.4Review252026-05-27
0.2.3Review252026-05-27

Block this in CI

PkgRadar gates sculblog (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi sculblog==0.2.9
Start free — 25 scans / moView full evidence