PyPI / platformdirs / 4.13.5

platformdirs 4.13.5

Source

https://github.com/tox-dev/platformdirs

Artifact scanned

platformdirs-4.13.5-py3-none-any.whl (wheel · 32.0 KB · SHA-256 53d3ec4280b8…)

Compared with

platformdirs-4.13.4-py3-none-any.whl (0 signals introduced since)

Files

13 scanned, 5 skipped (binary, oversized, or unrecognised)

Signals

0 critical · 0 warn · 1 info

Scan time

2.1 s

LLM review

Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.

Disclude version

4.3.0

Scanned (UTC)

2026-10-23 00:54

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

1. info warn → info by review dynamic-attribute platformdirs/testing.py:63:20

   reach-by-name through `vars` (ast pass, confidence 0.60)

       cls = platformdirs.PlatformDirs
       saved = {name: vars(cls)[name] for name in patches if name in vars(cls)}
       for name, value in patches.items():
           setattr(cls, name, value)

   likely benign LLM, confidence 0.90 Test helper that temporarily patches PlatformDirs class attributes via setattr and saves originals via vars().

   Reasoning

   The snippet saves class attributes via vars(cls) and then monkeypatches them with setattr, a common test-fixture pattern for overriding platform directory properties and restoring them later. It reads and writes attributes on a known local class with no execution, network, or encoding involved. The dynamic attribute access is a benign testing idiom in a library's own testing module.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o platformdirs-4.13.5-py3-none-any.whl https://files.pythonhosted.org/packages/6c/8a/1d8cb3842909dc193a73835adedf412e32e18f8ffd59f43983949622fe6f/platformdirs-4.13.5-py3-none-any.whl
printf '%s  %s\n' 53d3ec4280b815c1e0b02edad7f9ee8fda1ba9c0865dd9c2e6e63849ce82fc1e platformdirs-4.13.5-py3-none-any.whl | shasum -a 256 -c -
unzip -q platformdirs-4.13.5-py3-none-any.whl -d pkg
disclude scan --untrusted --severity info pkg