PkgRadar

PyPI · pypi.org

snakemake-executor-plugin-slurm

Py Import Time Subprocess: subprocess call with shell=True — passes argv to /bin/sh.

Why PkgRadar flagged 2.7.1

SeveritySignalEvidence
mediumPy Import Time Subprocesssubprocess call with shell=True — passes argv to /bin/sh. · snakemake_executor_plugin_slurm-2.7.1/snakemake_executor_plugin_slurm/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2.7.1Review242026-06-01

Block this in CI

PkgRadar gates snakemake-executor-plugin-slurm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi snakemake-executor-plugin-slurm==2.7.1