PkgRadar

PyPI · pypi.org

tot-sdk

Py Runtime Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 2026.5.26a140

SeveritySignalEvidence
mediumPy Runtime Subprocesssubprocess call — process spawning. · tot_sdk-2026.5.26a140/src/tot_sdk/agent_service_base.py

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.5.26a140Review202026-05-26
2026.5.26a138Review202026-05-26

Block this in CI

PkgRadar gates tot-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi tot-sdk==2026.5.26a140