disclude.ioPyPI / google-genai / 2.33.0
google-genai 2.33.0
- Source
- https://github.com/googleapis/python-genai
- Artifact scanned
google_genai-2.33.0-py3-none-any.whl- Compared with
google_genai-2.32.0-py3-none-any.whl(0 signals introduced since)- Files
- 596 scanned, 5 skipped (binary, oversized, or unrecognised)
- Signals
- 0 critical · 0 warn · 16 info
- Scan time
- 11.7 s
- LLM review
- Reviewed by claude-haiku-5-5 (Anthropic): 13 of 13 warn and critical signals; 13 demoted to info.
- Disclude version
- 4.3.0
- Scanned (UTC)
- 2026-10-23 16:12
Signals
Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
= = returndismissed Lazy submodule loader implemented via module __getattr__ that caches results in globals().Reasoning
This is the standard PEP 562 module-level __getattr__ pattern: it lazily imports a submodule by name, caches it in globals(), and raises AttributeError otherwise. The import target is a relative submodule of the same package, so nothing here is hidden or dangerous.
-
"""Prints the current file path and line number.""" =dismissed Debug helper that prints the current file and line number using frame introspection.Reasoning
inspect.currentframe() is used only to read the caller's file path and line number for a debug print. This is ordinary logging/diagnostic code with no execution or exfiltration.
-
= . + 1dismissed Test code that reads the caller's line number to check where a warning was raised.Reasoning
In a test helper, the frame's line number is taken so the test can assert which line emitted a warning. This is a routine testing technique.
-
== b ) assert ==dismissed Test assertion comparing decoded tokens to the UTF-8 bytes of a multilingual string.Reasoning
The byte literal is the UTF-8 encoding of a Chinese/English/emoji test string, used to assert round-tripping of decoded tokens. Hex escapes for multibyte UTF-8 are the expected way to write such fixtures; there is no decoding or execution.
-
=likely benign Test fixture containing a fixed binary byte sequence for bytes-transformer tests.Reasoning
The bytes literal is an opaque binary fixture used to test bytes handling in transformers. The same fixture appears in several test files, consistent with shared test data. It is not executed or decoded into code.
-
info
warn→ info by reviewpayload-bytes-literalgoogle/genai/tests/types/test_bytes_internal.py:36:5=likely benign Test fixture with raw binary bytes for internal bytes type tests.Reasoning
This is the same binary test fixture as in the other bytes tests, used to exercise internal bytes handling. Nothing in the snippet executes or decodes it into behavior.
-
=likely benign Test fixture with raw binary bytes for bytes type tests.Reasoning
The shared binary fixture is used as test data for the bytes type. It is passive data with no decoding, execution, or network activity.
-
= None return None =dismissed Optional-dependency lazy loader for ClientSession that caches the result in globals().Reasoning
This is a lazy optional-import pattern: a module-level __getattr__ tries an import, caches None on ImportError, and otherwise caches the imported symbol in globals(). The names are fixed, package-internal MCP types, so this is a normal optional-dependency mechanism.
-
return None = returndismissed Caches and returns the lazily imported ClientSession symbol.Reasoning
Same optional-dependency lazy loading pattern: the imported ClientSession is cached in globals() and returned. Nothing suspicious is present.
-
= None return None =dismissed Optional-dependency lazy loader for CallToolResult that caches the result in globals().Reasoning
Standard optional-import fallback that sets None on ImportError and otherwise caches CallToolResult in globals(). This is ordinary lazy loading of an optional MCP dependency.
-
return None = returndismissed Caches and returns the lazily imported CallToolResult symbol.Reasoning
Continues the same lazy-loading pattern for CallToolResult, returning the cached symbol. This is benign module plumbing.
-
= None return None =dismissed Optional-dependency lazy loader for the mcp_types module that caches the result in globals().Reasoning
Same optional-import pattern for the mcp_types module, with None on ImportError and caching in globals(). This is normal lazy loading and not a dropper.
-
return None = returndismissed Caches and returns the lazily imported mcp_types module, else raises AttributeError.Reasoning
The module-level __getattr__ caches and returns mcp_types, then raises AttributeError for unknown names. This is the standard way to lazily expose optional modules.
-
= """Equivalent to [GoogleSQL](https://cloud.google.com/bigquery/docs/reference/standard-sql/string_functions#regexp_contains) `REGEX_CONTAINS(target, expression)`.""" = -
=None, =, ) -
: """Required. BigQuery URI to a table, up to 2000 characters long. Accepted forms: * BigQuery path. For example: `bq://projectId.bqDatasetId.bqTableId`."""
Reproduce This Scan
Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
|