PkgRadar

PyPI · pypi.org

tokenview

Py Runtime Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 0.1.4

SeveritySignalEvidence
mediumPy Runtime Subprocesssubprocess call — process spawning. · tokenview-0.1.4/src/tokenview/sources/plugin_details.py
mediumPy Runtime Subprocesssubprocess call — process spawning. · tokenview-0.1.4/src/tokenview/sources/plugin_list.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.6Low risk02026-05-26
0.1.5Low risk02026-05-26
0.1.4Review402026-05-26
0.1.3Review402026-05-26
0.1.2Review402026-05-26
0.1.1Review402026-05-26
0.1.0Review402026-05-26

Block this in CI

PkgRadar gates tokenview (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi tokenview==0.1.4