jsonschema 4.26.0

Source: https://github.com/python-jsonschema/jsonschema
Tag scanned: v4.26.0
Compared with: v4.25.1 (0 signals introduced since)
Files: 62 scanned, 553 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 2 info
Scan time: 2.9 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
Disclude version: 4.1.0
Scanned (UTC): 2026-10-21 22:25

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info long-line README.rst:62:1

line length 822 characters (raw pass, confidence 0.50)

* Full support for `Draft 2020-12 <https://python-jsonschema.readthedocs.io/en/latest/api/jsonschema/validators/#jsonschema.validators.Draft202012Validator>`_, `Draft 2019-09 <https://python-jsonschema.readthedocs.io/en/latest/api/jsonschema/validators/#jsonschema.validators.Draft201909Validator>`_, `Draft 7 <https://p

info ~~warn~~ → info by review frame-introspection jsonschema/tests/_suite.py:285:12

`sys._getframe` — call-stack frame introspection (ast pass, confidence 0.70)
```
    return sys._getframe(2).f_globals["__name__"]
```
likely benign LLM, confidence 0.93 A test-suite helper uses sys._getframe to read the calling module's __name__.
Reasoning
The call sys._getframe(2).f_globals['__name__'] is a common idiom for determining the calling module's name, used here in a test-suite helper that loads or names test modules. It reads only module metadata and performs no execution, network, or data exfiltration. The AST pass flags frame introspection generically, and this use is benign in context.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.1.0
git clone https://github.com/python-jsonschema/jsonschema jsonschema && cd jsonschema
git checkout v4.26.0
disclude scan --severity info --diff v4.25.1 .