PyPI / pre-commit / 4.7.0
pre-commit 4.7.0
- Source
- https://github.com/pre-commit/pre-commit
- Artifact scanned
pre_commit-4.7.0-py2.py3-none-any.whl- Compared with
pre_commit-4.6.2-py2.py3-none-any.whl(0 signals introduced since)- Files
- 73 scanned, 16 skipped (binary, oversized, or unrecognised)
- Signals
- 0 critical · 0 warn · 1 info
- Scan time
- 2.1 s
- LLM review
- Reviewed by claude-haiku-5-5 (Anthropic): 1 of 1 warn and critical signal; 1 demoted to info.
- Disclude version
- 4.3.0
- Scanned (UTC)
- 2026-10-23 09:18
Signals
Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
if [ -x "$INSTALL_PYTHON" ]; then exec "$INSTALL_PYTHON" -mpre_commit "${ARGS[@]}" elif command -v pre-commit > /dev/null; then exec pre-commit "${ARGS[@]}"likely benign A bash git hook template that execs the pre-commit tool from a configured Python interpreter or from PATH.Reasoning
This is the standard pre-commit hook template shell script. The exec call runs the pre-commit Python module from a configured install path (INSTALL_PYTHON) or the pre-commit command on PATH, passing through hook arguments. Dynamic exec of a variable path is the expected design of a launcher script; no decoding, download, or obfuscation is present.
Reproduce This Scan
Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
|