disclude.ioPyPI / smart-open / 8.0.4
smart-open 8.0.4
- Source
- https://github.com/piskvorky/smart_open
- Tag scanned
v8.0.4- Compared with
v8.0.3(0 signals introduced since)- Files
- 83 scanned, 14 skipped (binary, oversized, or unrecognised)
- Signals
- 0 critical · 0 warn · 46 info
- Scan time
- 6.8 s
- LLM review
- Reviewed by claude-haiku-5-5 (Anthropic): 12 of 12 warn and critical signals; 12 demoted to info.
- Disclude version
- 4.1.0
- Scanned (UTC)
- 2026-10-22 08:18
Signals
Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
-likely benign A changelog entry containing a Cyrillic letter that looks like Latin C.Reasoning
The Cyrillic С in 'Сlose' is a homoglyph in a changelog prose line; a typo or copy-paste artifact with no code execution or hiding effect.
-
-likely benign Same changelog word mixing Cyrillic and Latin letters.Reasoning
Same line as the homoglyph finding; mixed script in a changelog word is a typo-level artifact, not a payload.
-
>>> ... = >>>likely benign Documentation example decompressing gzip-encoded JSON from a URL.Reasoning
This is documentation showing gzip.decompress on a remote file's JSON response in a doctest-like example; no hidden payload or runtime dropper.
-
... , ```likely benign Russian text in a README example, flagged as homoglyph.Reasoning
Russian prose text in a README sample that is actually Russian literature text used in an example; the Cyrillic В is legitimate language content, not an identifier obfuscation.
-
likely benign CI helper that executes passed-in command arguments.
Reasoning
A helper script that runs its arguments as a command is a standard CI wrapper pattern; the caller controls the command, which is expected for this helper.
-
= + = # noqa: RUF001 # Cyrillic fixture = assert == -
= + = # noqa: RUF001 # Cyrillic fixture = assert == -
) : = assert == +likely benign Integration test decompressing gzip content to check a file.Reasoning
Test code verifying gzip round-trip content; decompression of test data is ordinary.
-
= + = # noqa: RUF001 # Cyrillic fixture = assert == -
= + = # noqa: RUF001 # Cyrillic fixture = assert == -
= assert # noqa: RUF001 # Cyrillic fixture assert -
= assert # noqa: RUF001 # Cyrillic fixture assert -
= assert # noqa: RUF001 # Cyrillic fixture assert -
"""Round-trip a text object via smart_open against S3.""" = # noqa: RUF001 # Cyrillic fixture = assert == -
"""Round-trip a text object via smart_open against S3.""" = # noqa: RUF001 # Cyrillic fixture = assert == -
"""Round-trip a text object with server-side encryption enabled.""" = # noqa: RUF001 # Cyrillic fixture = -
"""Round-trip a text object with server-side encryption enabled.""" = # noqa: RUF001 # Cyrillic fixture = -
"""Ensure that we can wrap a smart_open s3 stream in a BufferedWriter.""" = # noqa: RUF001 # Cyrillic fixture -
likely benign Public Azurite emulator connection string with a base64 account key.
Reasoning
This is the well-known Azurite development storage emulator account key, a public test credential used for local testing, not a secret or obfuscated payload.
-
"""Read gzip.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = -
"""Read gzip.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = -
"""Gzip.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = f -
"""Gzip.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = f -
"""Ensure that we can wrap a smart_open azure stream in a `BufferedWriter`.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = f -
"""Binary iterator.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = f -
"""Nonexisting container.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
"""Does appending to a gzip-compressed Azure Blob work via smart_open.open?""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = f -
"""Does appending to a gzip-compressed Azure Blob work via smart_open.open?""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = f -
= # noqa: RUF001 # fixture deliberately uses Cyrillic characters assert == -
"""Read gzip.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = -
"""Read gzip.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = -
"""Binary iterator.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
"""Text iterator.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = f -
"""Gzip.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
"""Gzip.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
"""Ensure that we can wrap a smart_open s3 stream in a `BufferedWriter`.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
"""Nonexisting bucket.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
"""Ensure that we can wrap a smart_open s3 stream in a `BufferedWriter`.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
"""Nonexisting bucket.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
"""Test that SinglepartWriter.truncate works.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters -
# noqa: PTH123, SIM115 # test fixture path open """Is SSH line iterator called correctly?"""likely benign Test mock returning a handle to the test file itself.Reasoning
open(__file__) passed as a mock return value in a test fixture; a benign test idiom with no decoding or execution of hidden content.
-
"""SetUp.""" = # noqa: RUF001 # fixture deliberately uses Cyrillic characters = = -
=likely benign Test fixture containing bz2-compressed bytes.Reasoning
A bz2-compressed test data literal (BZh header) is expected test fixture content for compression tests; binary escapes are normal for compressed sample data.
-
# noqa: PTH123 # test fixture path openlikely benign Test mock returning the test file handle for an S3 write.Reasoning
Same benign test mock pattern using open(__file__) as a fixture return value.
-
# noqa: PTH123 # test fixture path openlikely benign Test mock returning the test file handle for an S3 read.Reasoning
Benign test mock using open(__file__) as the return value of a patched open; no payload extraction.
-
assert ==likely benign Test asserting gzip compress/decompress round-trip.Reasoning
A round-trip assertion that compresses then decompresses test data in a unit test; no hidden payload.
Reproduce This Scan
Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
&&