PyPI · pypi.org

txt2tex

Credential File Packaged: txt2tex-1.6.3/.env

Why PkgRadar flagged 1.6.3

Severity	Signal	Evidence
high	Credential File Packaged	txt2tex-1.6.3/.env · txt2tex-1.6.3/.env

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.6.3`	High risk	24	2026-05-30
`1.6.2`	High risk	24	2026-05-30
`1.6.1`	High risk	24	2026-05-30
`1.6.0`	High risk	24	2026-05-30
`1.5.0`	High risk	24	2026-05-30

Block this in CI

PkgRadar gates txt2tex (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi txt2tex==1.6.3