Source: pipenv Version: 11.9.0-2 Severity: serious pipenv contains get-pipenv.py, which has a base85 blob that supposedly "contains an entire copy of pip." pipenv has a runtime dependency on python3-pip, so this is not actually needed and removing the file does not make the build fail.
Please repack the source, excluding that file.