PkgRadar

PyPI · pypi.org

snakemake-executor-plugin-sge

Py Import Time Subprocess: subprocess call with shell=True — passes argv to /bin/sh.

Why PkgRadar flagged 0.6.13

SeveritySignalEvidence
mediumPy Import Time Subprocesssubprocess call with shell=True — passes argv to /bin/sh. · snakemake_executor_plugin_sge-0.6.13/snakemake_executor_plugin_sge/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.6.13Review482026-06-06
0.6.12Review482026-06-06
0.6.11Review482026-06-06
0.6.10Review482026-06-06
0.6.9Review482026-06-05
0.6.8Review482026-06-05
0.6.7Review482026-06-05
0.6.6Review482026-06-05
0.6.5Review482026-06-05
0.6.4Review482026-06-05

Block this in CI

PkgRadar gates snakemake-executor-plugin-sge (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi snakemake-executor-plugin-sge==0.6.13
Start free — 25 scans / moView full evidence