PyPI · pypi.org

smart-bbox

Py Install Time Compile Exec: Python exec(compile(...)) — typical obfuscated loader pattern.

Why PkgRadar flagged 0.1.19

Severity	Signal	Evidence
high	Py Install Time Compile Exec	Python exec(compile(...)) — typical obfuscated loader pattern. · smart_bbox-0.1.19/setup.py
medium	Py Install Time Subprocess	subprocess call — process spawning. · smart_bbox-0.1.19/smart/vendor/manifold/bindings/python/third_party/pybind11/setup.py
medium	Py Install Time Eval Exec	Python eval()/exec() called on a string. · smart_bbox-0.1.19/smart/vendor/manifold/bindings/python/third_party/pybind11/setup.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.1.19`	High risk	145	2026-06-04

Block this in CI

PkgRadar gates smart-bbox (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi smart-bbox==0.1.19