aiohappyeyeballs 2.7.1

Source: https://github.com/aio-libs/aiohappyeyeballs
Tag scanned: v2.7.1
Compared with: v2.7.0 (0 signals introduced since)
Files: 28 scanned, 8 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 1 info
Scan time: 3.2 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
Disclude version: 4.1.0
Scanned (UTC): 2026-10-21 23:25

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info ~~warn~~ → info by review encoding-base64 README.md:16:113

base64-like blob (924 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
```
9bd7?style=flat-square&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA4AAAASCAYAAABrXO8xAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAJJSURBVHgBfZLPa1NBEMe/s7tNXoxW1KJQKaUHkXhQvHgW6UHQQ09CBS/6V3hKc/AP8CqCrUcpmop3Cx48eDB4yEECjVQrlZb80CRN8t6OM/teagVxYZi38+Yz853dJbzoMV3MM8cJUcLMSUKIE8AzQ2PieZ
```
likely benign LLM, confidence 0.93 A base64-encoded PNG logo embedded as a data URI in a README badge line.
Reasoning
This is a base64-encoded PNG image (data:image/png;base64, with the standard iVBORw0KGgo PNG header) embedded in a markdown image or badge line alongside a shields-style query string (style=flat-square&logo=). Embedding small logo images as data URIs is a common, legitimate README practice. The raw pass flags any long base64-like string, and it has a high false-positive rate. Nothing here executes code or hides a payload, and the file is documentation.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.1.0
git clone https://github.com/aio-libs/aiohappyeyeballs aiohappyeyeballs && cd aiohappyeyeballs
git checkout v2.7.1
disclude scan --severity info --diff v2.7.0 .