colorama 0.4.6

Source: https://github.com/tartley/colorama
Tag scanned: 0.4.6
Compared with: 0.4.5 (2 signals introduced since)
Files: 33 scanned, 12 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 2 info
Scan time: 0.1 s
LLM review: LLM review by claude-haiku-5-5 (Anthropic): nothing at warn or critical to review.
Disclude version: 4.0.0
Scanned (UTC): 2026-10-14 18:28

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info dynamic-execution test-release:21:1 new in this release

command name is a variable (`$bin`) that this file sets only to plain text (ast pass, confidence 0.40)
```
# Upload to the test PyPI.
$bin/twine upload --repository testpypi dist/colorama-* \
    || echo "  > Expect a 400 if package was already uploaded."
```

info dynamic-execution test-release:28:5 new in this release

command name is a variable (`$syspython`) that this file sets only to plain text (ast pass, confidence 0.40)

    # Create a temporary disposable virtualenv.
    $syspython -m venv --clear $sandbox/venv

    # voodoo sleep. I saw the following install fail, due to expected version

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.0.0
git clone https://github.com/tartley/colorama colorama && cd colorama
git checkout 0.4.6
disclude scan --severity info --diff 0.4.5 .