PyPI / portalocker / 4.4.1

portalocker 4.4.1

Source
https://github.com/wolph/portalocker
Artifact scanned
portalocker-4.4.1-py3-none-any.whl (wheel · 126.7 KB · SHA-256 4a184e8fb1ad…)
Compared with
portalocker-4.4.0-py3-none-any.whl (0 signals introduced since)
Files
9 scanned, 5 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 0 warn · 1 info
Scan time
2.2 s
LLM review
Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
Disclude version
4.3.0
Scanned (UTC)
2026-10-23 12:03

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. info warn → info by review frame-introspection portalocker/utils.py:829:31

    `inspect.currentframe` — call-stack frame introspection (ast pass, confidence 0.70)

        """
        frame: FrameType | None = inspect.currentframe()
        if frame is None:
            return 1
    likely benign LLM, confidence 0.95 Call to inspect.currentframe() with a None guard inside the portalocker library, likely used for stack inspection.
    Reasoning

    The snippet shows inspect.currentframe() used with a None check, inside a docstring-adjacent helper in a file-locking library. Frame introspection here is typical for determining caller context (e.g., for logging or stack depth). No decoding, execution, network, or process spawning is present. This is a legitimate coding pattern.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o portalocker-4.4.1-py3-none-any.whl https://files.pythonhosted.org/packages/47/ec/02e439b10c6b2aa26629f269a27ae2aa395fae70207fd344046858a34156/portalocker-4.4.1-py3-none-any.whl
printf '%s  %s\n' 4a184e8fb1adb37e078ca1804f1b7c0d8e73d81136790b1ad695ae8f1c8be291 portalocker-4.4.1-py3-none-any.whl | shasum -a 256 -c -
unzip -q portalocker-4.4.1-py3-none-any.whl -d pkg
disclude scan --untrusted --severity info pkg