@neralabs/rerail-pack-python 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (147) hide show
  1. package/LICENSE +202 -0
  2. package/NOTICE +7 -0
  3. package/README.md +36 -0
  4. package/licenses/bandit/LICENSE +175 -0
  5. package/licenses/bandit/UPSTREAM.md +100 -0
  6. package/licenses/ruff/LICENSE +430 -0
  7. package/licenses/ruff/UPSTREAM.md +338 -0
  8. package/pack.json +912 -0
  9. package/package.json +30 -0
  10. package/rules/bandit-b101-assert-used.json +38 -0
  11. package/rules/bandit-b102-exec-used.json +125 -0
  12. package/rules/bandit-b110-try-except-pass.json +109 -0
  13. package/rules/bandit-b112-try-except-continue.json +109 -0
  14. package/rules/bandit-b113-request-without-timeout.json +138 -0
  15. package/rules/bandit-b301-pickle.json +58 -0
  16. package/rules/bandit-b302-marshal.json +48 -0
  17. package/rules/bandit-b303-md5.json +79 -0
  18. package/rules/bandit-b305-cipher-modes.json +47 -0
  19. package/rules/bandit-b306-mktemp-q.json +54 -0
  20. package/rules/bandit-b307-eval.json +125 -0
  21. package/rules/bandit-b308-mark-safe.json +47 -0
  22. package/rules/bandit-b310-urllib-urlopen.json +54 -0
  23. package/rules/bandit-b311-random.json +57 -0
  24. package/rules/bandit-b312-telnetlib.json +47 -0
  25. package/rules/bandit-b313-xml-bad-celementtree.json +50 -0
  26. package/rules/bandit-b314-xml-bad-elementtree.json +50 -0
  27. package/rules/bandit-b315-xml-bad-expatreader.json +47 -0
  28. package/rules/bandit-b316-xml-bad-expatbuilder.json +48 -0
  29. package/rules/bandit-b317-xml-bad-sax.json +58 -0
  30. package/rules/bandit-b318-xml-bad-minidom.json +48 -0
  31. package/rules/bandit-b319-xml-bad-pulldom.json +48 -0
  32. package/rules/bandit-b321-ftplib.json +47 -0
  33. package/rules/bandit-b323-unverified-context.json +47 -0
  34. package/rules/bandit-b401-import-telnetlib.json +48 -0
  35. package/rules/bandit-b402-import-ftplib.json +48 -0
  36. package/rules/bandit-b405-import-xml-etree.json +69 -0
  37. package/rules/bandit-b406-import-xml-sax.json +73 -0
  38. package/rules/bandit-b407-import-xml-expat.json +54 -0
  39. package/rules/bandit-b408-import-xml-minidom.json +54 -0
  40. package/rules/bandit-b409-import-xml-pulldom.json +54 -0
  41. package/rules/bandit-b411-import-xmlrpclib.json +48 -0
  42. package/rules/bandit-b413-import-pycrypto.json +159 -0
  43. package/rules/bandit-b415-import-pyghmi.json +48 -0
  44. package/rules/bandit-b502-ssl-with-bad-version.json +90 -0
  45. package/rules/bandit-b505-weak-cryptographic-key.json +166 -0
  46. package/rules/bandit-b507-ssh-no-host-key-verification.json +210 -0
  47. package/rules/bandit-b606-start-process-with-no-shell.json +63 -0
  48. package/rules/bandit-b610-django-extra-used.json +268 -0
  49. package/rules/bandit-b615-huggingface-unsafe-download.json +1152 -0
  50. package/rules/ruff-async100-cancel-scope-no-checkpoint.json +357 -0
  51. package/rules/ruff-async105-trio-sync-call.json +199 -0
  52. package/rules/ruff-async115-async-zero-sleep.json +264 -0
  53. package/rules/ruff-async116-long-sleep-not-forever.json +267 -0
  54. package/rules/ruff-async210-blocking-http-call-in-async-function.json +161 -0
  55. package/rules/ruff-async221-run-process-in-async-function.json +342 -0
  56. package/rules/ruff-async222-wait-for-process-in-async-function.json +144 -0
  57. package/rules/ruff-async230-blocking-open-call-in-async-function.json +339 -0
  58. package/rules/ruff-async250-blocking-input-in-async-function.json +143 -0
  59. package/rules/ruff-async251-blocking-sleep-in-async-function.json +140 -0
  60. package/rules/ruff-b002-unary-prefix-increment-decrement.json +54 -0
  61. package/rules/ruff-b003-assignment-to-os-environ.json +54 -0
  62. package/rules/ruff-b004-unreliable-callable-check.json +171 -0
  63. package/rules/ruff-b005-strip-with-multi-characters.json +131 -0
  64. package/rules/ruff-b007-unused-loop-control-variable.json +368 -0
  65. package/rules/ruff-b009-get-attr-with-constant.json +190 -0
  66. package/rules/ruff-b010-set-attr-with-constant.json +219 -0
  67. package/rules/ruff-b011-assert-false.json +62 -0
  68. package/rules/ruff-b013-redundant-tuple-in-exception-handler.json +94 -0
  69. package/rules/ruff-b014-duplicate-handler-exception.json +126 -0
  70. package/rules/ruff-b016-raise-literal.json +47 -0
  71. package/rules/ruff-b020-loop-variable-overrides-iterator.json +341 -0
  72. package/rules/ruff-b021-f-string-docstring.json +48 -0
  73. package/rules/ruff-b022-useless-contextlib-suppress.json +95 -0
  74. package/rules/ruff-b023-function-uses-loop-variable.json +560 -0
  75. package/rules/ruff-b025-duplicate-try-block-exception.json +182 -0
  76. package/rules/ruff-b026-star-arg-unpacking-after-keyword-arg.json +57 -0
  77. package/rules/ruff-b028-no-explicit-stacklevel.json +177 -0
  78. package/rules/ruff-b029-except-with-empty-tuple.json +102 -0
  79. package/rules/ruff-b032-unintentional-type-annotation.json +157 -0
  80. package/rules/ruff-b033-duplicate-value.json +129 -0
  81. package/rules/ruff-b034-re-sub-positional-args.json +159 -0
  82. package/rules/ruff-b039-mutable-contextvar-default.json +281 -0
  83. package/rules/ruff-b904-raise-without-from-inside-except.json +194 -0
  84. package/rules/ruff-b905-zip-without-explicit-strict.json +429 -0
  85. package/rules/ruff-e711-none-comparison.json +199 -0
  86. package/rules/ruff-e721-type-comparison.json +293 -0
  87. package/rules/ruff-e722-bare-except.json +57 -0
  88. package/rules/ruff-e742-ambiguous-class-name.json +47 -0
  89. package/rules/ruff-e743-ambiguous-function-name.json +47 -0
  90. package/rules/ruff-f403-undefined-local-with-import-star.json +73 -0
  91. package/rules/ruff-f405-undefined-local-with-import-star-usage.json +87 -0
  92. package/rules/ruff-f406-undefined-local-with-nested-import-star-usage.json +39 -0
  93. package/rules/ruff-f407-future-feature-not-defined.json +56 -0
  94. package/rules/ruff-f501-percent-format-invalid-format.json +88 -0
  95. package/rules/ruff-f502-percent-format-expected-mapping.json +127 -0
  96. package/rules/ruff-f503-percent-format-expected-sequence.json +127 -0
  97. package/rules/ruff-f504-percent-format-extra-named-arguments.json +46 -0
  98. package/rules/ruff-f505-percent-format-missing-argument.json +49 -0
  99. package/rules/ruff-f506-percent-format-mixed-positional-and-named.json +114 -0
  100. package/rules/ruff-f507-percent-format-positional-count-mismatch.json +78 -0
  101. package/rules/ruff-f508-percent-format-star-requires-sequence.json +112 -0
  102. package/rules/ruff-f509-percent-format-unsupported-format-character.json +86 -0
  103. package/rules/ruff-f521-string-dot-format-invalid-format.json +83 -0
  104. package/rules/ruff-f522-string-dot-format-extra-named-arguments.json +46 -0
  105. package/rules/ruff-f523-string-dot-format-extra-positional-arguments.json +48 -0
  106. package/rules/ruff-f524-string-dot-format-missing-arguments.json +46 -0
  107. package/rules/ruff-f525-string-dot-format-mixing-automatic.json +99 -0
  108. package/rules/ruff-f541-f-string-missing-placeholders.json +52 -0
  109. package/rules/ruff-f601-multi-value-repeated-key-literal.json +215 -0
  110. package/rules/ruff-f602-multi-value-repeated-key-variable.json +123 -0
  111. package/rules/ruff-f622-multiple-starred-expressions.json +57 -0
  112. package/rules/ruff-f632-is-literal.json +232 -0
  113. package/rules/ruff-f633-invalid-print-syntax.json +299 -0
  114. package/rules/ruff-f701-break-outside-loop.json +64 -0
  115. package/rules/ruff-f702-continue-outside-loop.json +64 -0
  116. package/rules/ruff-f706-return-outside-function.json +61 -0
  117. package/rules/ruff-f707-default-except-not-last.json +50 -0
  118. package/rules/ruff-f722-forward-annotation-syntax-error.json +654 -0
  119. package/rules/ruff-f822-undefined-export.json +55 -0
  120. package/rules/ruff-f823-undefined-local.json +42 -0
  121. package/rules/ruff-f842-unused-annotation.json +51 -0
  122. package/rules/ruff-f901-raise-not-implemented.json +97 -0
  123. package/rules/ruff-pie794-duplicate-class-field-definition.json +157 -0
  124. package/rules/ruff-pie796-non-unique-enums.json +460 -0
  125. package/rules/ruff-pie800-unnecessary-spread.json +62 -0
  126. package/rules/ruff-pie804-unnecessary-dict-kwargs.json +179 -0
  127. package/rules/ruff-pie807-reimplemented-container-builtin.json +100 -0
  128. package/rules/ruff-pie810-multiple-starts-ends-with.json +585 -0
  129. package/rules/ruff-ret501-unnecessary-return-none.json +256 -0
  130. package/rules/ruff-ret502-implicit-return-value.json +163 -0
  131. package/rules/ruff-ret505-superfluous-else-return.json +211 -0
  132. package/rules/ruff-ret506-superfluous-else-raise.json +211 -0
  133. package/rules/ruff-ret507-superfluous-else-continue.json +211 -0
  134. package/rules/ruff-ret508-superfluous-else-break.json +211 -0
  135. package/rules/ruff-sim101-duplicate-isinstance-call.json +384 -0
  136. package/rules/ruff-sim107-return-in-try-except-finally.json +82 -0
  137. package/rules/ruff-sim109-compare-with-tuple.json +205 -0
  138. package/rules/ruff-sim112-uncapitalized-environment-variables.json +168 -0
  139. package/rules/ruff-sim113-enumerate-for-loop.json +562 -0
  140. package/rules/ruff-sim208-double-negation.json +58 -0
  141. package/rules/ruff-sim210-if-expr-with-true-false.json +90 -0
  142. package/rules/ruff-sim211-if-expr-with-false-true.json +90 -0
  143. package/rules/ruff-sim212-if-expr-with-twisted-arms.json +95 -0
  144. package/rules/ruff-sim300-yoda-conditions.json +487 -0
  145. package/rules/ruff-sim905-split-static-string.json +579 -0
  146. package/rules/ruff-sim910-dict-get-with-none-default.json +518 -0
  147. package/rules/ruff-t100-debugger.json +197 -0
@@ -0,0 +1,55 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-f822-undefined-export",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's F822 (undefined-export) with default settings, on the engine's name resolution (M10a `resolves.unresolved` on `__all__` entries): a string entry of a static module `__all__` definition (Ruff's extract_dunder_all_names) (an implicit concatenation is one entry) that names no module binding (a bare annotation included) and no builtin, in a module without a star import. `__init__.py` is exempt (Ruff reports it only in preview). Reported on the string.",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": [
12
+ "**/__init__.py",
13
+ "**/__init__.pyi",
14
+ "__init__.py",
15
+ "__init__.pyi"
16
+ ]
17
+ },
18
+ "clauses": [
19
+ {
20
+ "id": "undefined-export",
21
+ "forbid": {
22
+ "ast": {
23
+ "language": "python",
24
+ "rule": {
25
+ "any": [
26
+ {
27
+ "kind": "string"
28
+ },
29
+ {
30
+ "kind": "concatenated_string"
31
+ }
32
+ ],
33
+ "pattern": "$S",
34
+ "resolves": {
35
+ "unresolved": true
36
+ }
37
+ }
38
+ }
39
+ },
40
+ "violation": {
41
+ "anchor": "witness.span",
42
+ "code": "F822",
43
+ "message": "Undefined name $S in `__all__`",
44
+ "suppress": {
45
+ "noqa": {
46
+ "codes": [
47
+ "F822"
48
+ ],
49
+ "parent": "statement"
50
+ }
51
+ }
52
+ }
53
+ }
54
+ ]
55
+ }
@@ -0,0 +1,42 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-f823-undefined-local",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's F823 (undefined-local) with default settings, on the engine's name resolution (M10a `resolves.beforeLocal`, Ruff's undefined_local): a function's first read of a name that resolves to an enclosing function's or the module's binding which the function's own later binding of the name shadows, where that binding is the function's first and latest of the name (not `global`, `nonlocal` or `del`). Reported on the read. Ported from the Ruff conformance suite (rerail/conformance/ruff/rules/F823.json at 3f102adcb), with Ruff's `# noqa` honoured as the Ruff CLI honours it.",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": []
12
+ },
13
+ "clauses": [
14
+ {
15
+ "id": "undefined-local",
16
+ "forbid": {
17
+ "ast": {
18
+ "language": "python",
19
+ "rule": {
20
+ "kind": "identifier",
21
+ "pattern": "$N",
22
+ "resolves": {
23
+ "beforeLocal": true
24
+ }
25
+ }
26
+ }
27
+ },
28
+ "violation": {
29
+ "anchor": "witness.span",
30
+ "code": "F823",
31
+ "message": "Local variable `$N` referenced before assignment",
32
+ "suppress": {
33
+ "noqa": {
34
+ "codes": [
35
+ "F823"
36
+ ]
37
+ }
38
+ }
39
+ }
40
+ }
41
+ ]
42
+ }
@@ -0,0 +1,51 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-f842-unused-annotation",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's F842 (unused-annotation) with default settings (`dummy-variable-rgx` = `^(_+|(_+[a-zA-Z0-9_]*[a-zA-Z0-9]+?))$`), on the engine's usedness (M10a `binds` with form `annotation`, Ruff's unused_annotation): the latest binding of a name in a function or lambda scope that is a bare annotation (`x: int`, `(x): int`) nothing reads, not a dummy name. Names in strings Ruff parses as type definitions are reads (M11a).",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": []
12
+ },
13
+ "clauses": [
14
+ {
15
+ "id": "unused-annotation",
16
+ "forbid": {
17
+ "ast": {
18
+ "language": "python",
19
+ "rule": {
20
+ "kind": "identifier",
21
+ "pattern": "$N",
22
+ "binds": {
23
+ "form": "annotation",
24
+ "scope": [
25
+ "function",
26
+ "lambda"
27
+ ],
28
+ "latest": true,
29
+ "used": false
30
+ },
31
+ "not": {
32
+ "regex": "^(?:_+|_+[a-zA-Z0-9_]*[a-zA-Z0-9])$"
33
+ }
34
+ }
35
+ }
36
+ },
37
+ "violation": {
38
+ "anchor": "witness.span",
39
+ "code": "F842",
40
+ "message": "Local variable `$N` is annotated but never used",
41
+ "suppress": {
42
+ "noqa": {
43
+ "codes": [
44
+ "F842"
45
+ ]
46
+ }
47
+ }
48
+ }
49
+ }
50
+ ]
51
+ }
@@ -0,0 +1,97 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-f901-raise-not-implemented",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's F901 (raise-not-implemented) with default settings: the exception of a `raise` (not its `from` cause) that is the name `NotImplemented` or a call whose callee is that name, parentheses transparent. Reported on the name. Ruff matches the name itself, not the builtin binding.",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": []
12
+ },
13
+ "clauses": [
14
+ {
15
+ "id": "raise-not-implemented",
16
+ "forbid": {
17
+ "ast": {
18
+ "language": "python",
19
+ "utils": {
20
+ "raised": {
21
+ "any": [
22
+ {
23
+ "follows": {
24
+ "stopBy": "neighbor",
25
+ "regex": "^raise$"
26
+ },
27
+ "inside": {
28
+ "stopBy": "neighbor",
29
+ "kind": "raise_statement"
30
+ }
31
+ },
32
+ {
33
+ "inside": {
34
+ "stopBy": "neighbor",
35
+ "kind": "parenthesized_expression",
36
+ "matches": "raised"
37
+ }
38
+ },
39
+ {
40
+ "not": {
41
+ "follows": {
42
+ "stopBy": "neighbor",
43
+ "regex": "(?s)."
44
+ }
45
+ },
46
+ "inside": {
47
+ "stopBy": "neighbor",
48
+ "kind": "call",
49
+ "matches": "raised-direct"
50
+ }
51
+ }
52
+ ]
53
+ },
54
+ "raised-direct": {
55
+ "any": [
56
+ {
57
+ "follows": {
58
+ "stopBy": "neighbor",
59
+ "regex": "^raise$"
60
+ },
61
+ "inside": {
62
+ "stopBy": "neighbor",
63
+ "kind": "raise_statement"
64
+ }
65
+ },
66
+ {
67
+ "inside": {
68
+ "stopBy": "neighbor",
69
+ "kind": "parenthesized_expression",
70
+ "matches": "raised-direct"
71
+ }
72
+ }
73
+ ]
74
+ }
75
+ },
76
+ "rule": {
77
+ "kind": "identifier",
78
+ "regex": "^NotImplemented$",
79
+ "matches": "raised"
80
+ }
81
+ }
82
+ },
83
+ "violation": {
84
+ "anchor": "witness.span",
85
+ "code": "F901",
86
+ "message": "`raise NotImplemented` should be `raise NotImplementedError`",
87
+ "suppress": {
88
+ "noqa": {
89
+ "codes": [
90
+ "F901"
91
+ ]
92
+ }
93
+ }
94
+ }
95
+ }
96
+ ]
97
+ }
@@ -0,0 +1,157 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-pie794-duplicate-class-field-definition",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's PIE794 (duplicate-class-field-definition): in a class body, an assignment or annotated assignment to a name `N` whose value does not mention `N`, after an earlier such definition of `N` in the same body.",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": []
12
+ },
13
+ "clauses": [
14
+ {
15
+ "id": "duplicate-class-field-definition",
16
+ "forbid": {
17
+ "ast": {
18
+ "language": "python",
19
+ "utils": {
20
+ "target-n": {
21
+ "any": [
22
+ {
23
+ "kind": "identifier",
24
+ "pattern": "$N"
25
+ },
26
+ {
27
+ "any": [
28
+ {
29
+ "any": [
30
+ {
31
+ "kind": "parenthesized_expression"
32
+ },
33
+ {
34
+ "kind": "tuple_pattern"
35
+ }
36
+ ]
37
+ }
38
+ ],
39
+ "not": {
40
+ "has": {
41
+ "stopBy": "neighbor",
42
+ "regex": "^,$"
43
+ }
44
+ },
45
+ "has": {
46
+ "stopBy": "neighbor",
47
+ "matches": "target-n"
48
+ }
49
+ }
50
+ ]
51
+ },
52
+ "field-def": {
53
+ "kind": "expression_statement",
54
+ "has": {
55
+ "stopBy": "neighbor",
56
+ "kind": "assignment",
57
+ "all": [
58
+ {
59
+ "has": {
60
+ "stopBy": "neighbor",
61
+ "not": {
62
+ "follows": {
63
+ "stopBy": "neighbor",
64
+ "regex": "(?s)."
65
+ }
66
+ },
67
+ "matches": "target-n"
68
+ }
69
+ },
70
+ {
71
+ "not": {
72
+ "has": {
73
+ "stopBy": "neighbor",
74
+ "kind": "assignment"
75
+ }
76
+ }
77
+ },
78
+ {
79
+ "not": {
80
+ "has": {
81
+ "stopBy": "neighbor",
82
+ "follows": {
83
+ "stopBy": "neighbor",
84
+ "regex": "^=$"
85
+ },
86
+ "any": [
87
+ {
88
+ "kind": "identifier",
89
+ "pattern": "$N"
90
+ },
91
+ {
92
+ "has": {
93
+ "stopBy": "end",
94
+ "kind": "identifier",
95
+ "pattern": "$N",
96
+ "not": {
97
+ "any": [
98
+ {
99
+ "follows": {
100
+ "stopBy": "neighbor",
101
+ "regex": "^\\.$"
102
+ }
103
+ },
104
+ {
105
+ "inside": {
106
+ "stopBy": "neighbor",
107
+ "kind": "keyword_argument"
108
+ },
109
+ "precedes": {
110
+ "stopBy": "neighbor",
111
+ "regex": "^=$"
112
+ }
113
+ }
114
+ ]
115
+ }
116
+ }
117
+ }
118
+ ]
119
+ }
120
+ }
121
+ }
122
+ ]
123
+ }
124
+ }
125
+ },
126
+ "rule": {
127
+ "matches": "field-def",
128
+ "inside": {
129
+ "stopBy": "neighbor",
130
+ "kind": "block",
131
+ "inside": {
132
+ "stopBy": "neighbor",
133
+ "kind": "class_definition"
134
+ }
135
+ },
136
+ "follows": {
137
+ "stopBy": "end",
138
+ "matches": "field-def"
139
+ }
140
+ }
141
+ }
142
+ },
143
+ "violation": {
144
+ "anchor": "witness.span",
145
+ "code": "PIE794",
146
+ "message": "Class field `$N` is defined multiple times",
147
+ "suppress": {
148
+ "noqa": {
149
+ "codes": [
150
+ "PIE794"
151
+ ]
152
+ }
153
+ }
154
+ }
155
+ }
156
+ ]
157
+ }