PyPI · pypi.org
sitellm
Py Runtime Dynamic Dangerous Import: Dynamic __import__('os') — reflection bypass for static checks.
Why PkgRadar flagged 0.5.6
| Severity | Signal | Evidence |
|---|---|---|
| high | Py Runtime Dynamic Dangerous Import | Dynamic __import__('os') — reflection bypass for static checks. · sitellm-0.5.6/sitellm/integrations/gcs_bucket/gcs_bucket_mock_client.py |
| medium | Credential file access | matched "GOOGLE_APPLICATION_CREDENTIALS" · sitellm-0.5.6/sitellm/llms/vertex_ai/image_edit/vertex_gemini_transformation.py |
| medium | Credential file access | matched "GOOGLE_APPLICATION_CREDENTIALS" · sitellm-0.5.6/sitellm/llms/vertex_ai/image_edit/vertex_imagen_transformation.py |
| medium | Credential file access | matched "GOOGLE_APPLICATION_CREDENTIALS" · sitellm-0.5.6/sitellm/llms/vertex_ai/image_generation/vertex_gemini_transformation.py |
| medium | Credential file access | matched "GOOGLE_APPLICATION_CREDENTIALS" · sitellm-0.5.6/sitellm/llms/vertex_ai/image_generation/vertex_imagen_transformation.py |
| medium | Credential file access | matched "AWS_ACCESS_KEY" · sitellm-0.5.6/sitellm/utils.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.5.6 | High risk | 130 | 2026-06-12 |
0.5.5 | High risk | 130 | 2026-06-12 |
0.5.4 | High risk | 130 | 2026-06-05 |
0.5.3 | High risk | 130 | 2026-06-04 |
0.5.2 | High risk | 130 | 2026-06-03 |
0.5.1 | High risk | 130 | 2026-06-01 |
0.4.0 | High risk | 130 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem pypi sitellm==0.5.6