jsonschema 4.26.0

Source: https://github.com/python-jsonschema/jsonschema
Tag scanned: v4.26.0
Compared with: v4.25.1 (0 signals introduced since)
Files: 62 scanned, 553 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 2 info
Scan time: 2.0 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
Disclude version: 4.0.0
Scanned (UTC): 2026-10-14 18:16

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info long-line README.rst:62:1

line length 822 characters (raw pass, confidence 0.50)

* Full support for `Draft 2020-12 <https://python-jsonschema.readthedocs.io/en/latest/api/jsonschema/validators/#jsonschema.validators.Draft202012Validator>`_, `Draft 2019-09 <https://python-jsonschema.readthedocs.io/en/latest/api/jsonschema/validators/#jsonschema.validators.Draft201909Validator>`_, `Draft 7 <https://p

info ~~warn~~ → info by review frame-introspection jsonschema/tests/_suite.py:285:12

`sys._getframe` — call-stack frame introspection (ast pass, confidence 0.70)
```
    return sys._getframe(2).f_globals["__name__"]
```
likely benign LLM, confidence 0.93 Reads the calling frame's module name via sys._getframe in the jsonschema test suite helper.
Reasoning
sys._getframe(2).f_globals['__name__'] is a standard idiom for determining the calling module's name, used in test harness code to locate the module. It is not obfuscated, does not execute dynamic code, and has no network or dropper behavior. The frame introspection here is a benign metaprogramming pattern in a test suite file of a well-known library.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.0.0
git clone https://github.com/python-jsonschema/jsonschema jsonschema && cd jsonschema
git checkout v4.26.0
disclude scan --severity info --diff v4.25.1 .