PkgRadar

PyPI · pypi.org

walrio

Py Import Time Eval Exec: Python eval()/exec() called on a string.

Why PkgRadar flagged 1.3.7

SeveritySignalEvidence
mediumPy Import Time Eval ExecPython eval()/exec() called on a string. · walrio-1.3.7/modules/__init__.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.7Review242026-06-01
1.3.6Review242026-06-01
1.3.5Review242026-05-31
1.3.4Review242026-05-29

Block this in CI

PkgRadar gates walrio (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi walrio==1.3.7