PyPI / portalocker / 4.4.1
portalocker 4.4.1
- Source
- https://github.com/wolph/portalocker
- Artifact scanned
portalocker-4.4.1-py3-none-any.whl- Compared with
portalocker-4.4.0-py3-none-any.whl(0 signals introduced since)- Files
- 9 scanned, 5 skipped (binary, oversized, or unrecognised)
- Signals
- 0 critical · 0 warn · 1 info
- Scan time
- 2.2 s
- LLM review
- Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
- Disclude version
- 4.3.0
- Scanned (UTC)
- 2026-10-23 12:03
Signals
Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
""" frame: FrameType | None = inspect.currentframe() if frame is None: return 1likely benign Call to inspect.currentframe() with a None guard inside the portalocker library, likely used for stack inspection.Reasoning
The snippet shows inspect.currentframe() used with a None check, inside a docstring-adjacent helper in a file-locking library. Frame introspection here is typical for determining caller context (e.g., for logging or stack depth). No decoding, execution, network, or process spawning is present. This is a legitimate coding pattern.
Reproduce This Scan
Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
|