disclude.iomarkdown 3.11.2
- Source
- https://github.com/Python-Markdown/markdown
- Artifact scanned
markdown-3.11.2-py3-none-any.whl- Compared with
markdown-3.11.1-py3-none-any.whl(0 signals introduced since)- Files
- 36 scanned, 3 skipped (binary, oversized, or unrecognised)
- Signals
- 0 critical · 0 warn · 1 info
- Scan time
- 2.3 s
- LLM review
- Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
- Disclude version
- 4.3.0
- Scanned (UTC)
- 2026-10-23 10:33
Signals
Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
""" frame = sys._getframe(size) for size in count(size):likely benign Call-stack frame introspection via sys._getframe inside the Python-Markdown utility module.Reasoning
The snippet is from the Python-Markdown library's util module, where sys._getframe(size) is used to walk the call stack for a utility such as caller/module-name lookup. This is a legitimate, well-known introspection pattern in a widely used library, with no decoding, process spawning, network access, or dynamic execution in the shown code. The ast pass flagged only the frame-introspection API itself, which is low risk on its own.
Reproduce This Scan
Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
|