PkgRadar

PyPI · pypi.org

vocal-bridge

Py Runtime Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 0.19.0

SeveritySignalEvidence
mediumPy Runtime Subprocesssubprocess call — process spawning. · vocal_bridge-0.19.0/src/vocal_bridge/cli.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.21.0Low risk02026-06-03
0.20.0Low risk02026-05-27
0.19.0Review202026-05-26

Block this in CI

PkgRadar gates vocal-bridge (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi vocal-bridge==0.19.0
vocal-bridge — PyPI security scan | PkgRadar