github / github/codeql

LGTM.com - false positive - unused import + eval

未关闭
#2,292 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
false-positive Python
主要语言
CodeQL
星标
10.1k
派生
2.1k
平均合并
2 天 15 小时
30 天内合并 PR
141

描述

**Description of the false positive**

The import is not unused. If I delete it, I get the error

```
Traceback (most recent call last):
File "examples/bootstrap.py", line 53, in
app.layout = html.Div([navbar.run(), body.run()])
File "/Users/jks/code/htexpr/htexpr/htexpr.py", line 88, in run
return eval(self.code, {**frame.f_globals, **frame.f_locals, **bindings})
File "", line 1, in
NameError: name 'dcc' is not defined
```

The point of this liibrary is that it compiles strings into Python code objects, which are then evaluated. This is probably difficult to analyze statically without executing the code, so I wouldn't assign a high priority to this, but since the page asked me to report false positives, here goes.

**URL to the alert on the project page on LGTM.com**

https://lgtm.com/projects/g/jkseppan/htexpr/snapshot/4e3172505e73dfbb54169f9906460b17b5a10260/files/examples/bootstrap.py?sort=name&dir=ASC&mode=heatmap#x64fc00e52918b221:1

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。