FQN Browser

Represents gin.Context, the primary request/response carrier in the Gin HTTP framework. All user-input accessors (Query, Param, PostForm, etc.) are taint sources. Output methods (JSON, String, Redirect) are sinks for XSS and open-redirect rules.

Represents echo.Context in the Echo HTTP framework (v4). Provides typed accessors for all parts of the HTTP request. All input methods are taint sources.

Represents fiber.Ctx in the Fiber HTTP framework (v2), inspired by Express.js. Zero-allocation design. All input methods are taint sources.

Represents gorm.DB, the primary database handle in GORM v2. Raw(), Exec(), and Where() with string arguments are SQL injection sinks when called with unsanitized user input.

Represents sqlx.DB and sqlx.Tx from the sqlx library, which extends database/sql with struct scanning. Unsafe query methods (QueryUnsafe, GetUnsafe) and raw string methods are injection sinks.

Represents database/sql.DB and database/sql.Tx from the Go standard library. Query(), Exec(), and Prepare() are SQL injection sinks when the query string is built from user input instead of using ? placeholders.

The strconv standard library package. Atoi, ParseInt, ParseFloat, and related functions serve as sanitizers in SQL injection and path traversal rules — converting a string to a numeric type eliminates injection risk.

The os/exec standard library package. exec.Command and exec.CommandContext are command injection sinks when any argument comes from user-controlled input. Most dangerous with shell=true-equivalent patterns.

Represents *http.Request from the net/http standard library. Used in standard http.HandlerFunc handlers. FormValue, URL.Query(), Header.Get(), and Body are all taint sources.

Represents resty.Client and resty.Request from go-resty/resty v2. SetURL, Execute, Get, Post etc. are SSRF sinks when the URL comes from user-controlled input.

Represents jwt.Token from github.com/golang-jwt/jwt v5. The Valid field and Parse function are critical — rules detect patterns where signature verification is skipped.

Represents net/http.ResponseWriter. Write() and WriteString() are XSS sinks when writing unsanitized user input into the HTTP response body.

Represents net/http.Client. Do(), Get(), Post() are SSRF sinks when the URL comes from user input.

The os standard library package. Getenv() is a source of environment variable data. Open(), Create(), Remove() are file operation sinks for path traversal.

The path/filepath standard library package. Join(), Abs(), Clean() are used as sanitizers in path traversal rules when combined with containment checks.

The fmt standard library package. Sprintf, Fprintf, Sscanf are sources of formatted string data. Fprintf to http.ResponseWriter is an XSS sink.

Represents html/template.Template and text/template.Template. Execute() and ExecuteTemplate() are XSS sinks when data contains unsanitized user input passed to text/template (not html/template).

Weak cryptographic algorithms: crypto/md5, crypto/sha1, crypto/des, crypto/rc4. All New() and Sum() calls are findings — these algorithms are cryptographically broken.

Represents context.Context. Value() can propagate tainted data stored by upstream handlers — treat returned values as taint sources in inter-procedural analysis.

bufio.Reader wraps an io.Reader with buffering. ReadString() and ReadLine() are sources when the underlying reader is an HTTP request body or stdin.

bufio.Scanner reads tokens line-by-line. Text() and Bytes() are sources when the scanner wraps user-controlled input (stdin, HTTP body).

io.Reader interface. ReadAll() from io package returns the full content of a reader — source of taint when the reader wraps HTTP request body.

net/url package. Parse() returns a *url.URL from a string — source of taint when parsing user-supplied URLs. Used in SSRF detection for URL validation.

net.Dial and net.DialTCP create network connections. Dial() is an SSRF sink when the address is user-controlled.

crypto/tls package. Config.InsecureSkipVerify = true disables certificate verification — a finding for all production code.

encoding/base64 package. DecodeString() decodes user input — the result is still tainted and must be sanitized before use in sinks.

encoding/hex package. DecodeString() converts hex to bytes — does not sanitize taint. EncodeToString() may be used as a sanitizer in specific contexts.

encoding/json package. Unmarshal and Decoder.Decode() are sources of tainted data from JSON input. Marshal() propagates taint to output.

encoding/xml package. Unmarshal and Decoder.Decode() are sources. Can also be an XXE sink if xml.Decoder is used without disabling external entity processing.

encoding/csv package. Reader.Read() and Reader.ReadAll() return user-controlled CSV data as string slices — treat as taint sources.

encoding/binary package. Read() deserializes binary data from a reader — source of taint when the reader is network or user input.

encoding/gob package. Decoder.Decode() deserializes arbitrary Go types — unsafe deserialization sink when decoding untrusted data.

mime/multipart package. Reader.ReadForm() parses multipart form data including file uploads — source of user-controlled filenames and content.

net/http.ServeMux is the HTTP request multiplexer. Handle() and HandleFunc() register handlers — not typically a security sink but relevant for routing analysis.

net/http.Server. ListenAndServe() without TLS is a finding in server configurations that should enforce HTTPS.

net/http.Cookie struct. Missing Secure, HttpOnly, or SameSite flags are security findings for session cookies.

net/smtp package. SendMail() and SMTP.Mail() are email injection sinks when headers or body are built from user input without sanitization.

log standard library package. Printf, Println, and Fatal variants may log sensitive user input — a finding for privacy/compliance rules.

log/slog package (Go 1.21+). Structured logging — Info, Warn, Error are log injection sinks when message or attributes contain unsanitized user input.

strings package. Contains(), HasPrefix(), ReplaceAll() are used as partial sanitizers. Builder is used to construct tainted strings.

regexp package. FindString() and FindAllString() return tainted matches. MustCompile() with user-controlled pattern is a ReDoS risk.

math/rand package. Intn(), Float64() and related functions use a deterministic PRNG — a finding when used for cryptographic purposes (tokens, session IDs).

crypto/rand package. The Reader is the cryptographically secure random source — use this instead of math/rand for tokens and session IDs.

sync package. Mutex, RWMutex, Once — not security sinks but relevant for race condition detection rules.

sync.Map provides a concurrent map. Load() and Store() are relevant for data flow tracking in concurrent handlers where shared state is modified.

reflect package. reflect.ValueOf() and reflect.New() with user-controlled type strings enable dynamic code execution — a finding for unsafe reflection rules.

runtime package. SetFinalizer(), GOMAXPROCS() — not typical security sinks but relevant for resource exhaustion rules.

os/user package. Lookup() and LookupId() resolve usernames — source of OS-level user data. Relevant for privilege escalation analysis.

syscall package. Exec(), RawSyscall(), and socket operations are low-level command and network injection sinks.

io/fs package (Go 1.16+). FS interface and ReadFile() operate on filesystem abstractions — path traversal sinks when path is user-controlled.

html/template package — the safe version of text/template. Auto-escapes context-appropriately. HTML(), JS(), URL() types are escape bypasses when used with user input.

Package-level net/http functions: Get(), Post(), Head(). SSRF sinks when the URL argument is derived from user input.

archive/tar package. Reader.Next() returns headers with user-controlled filenames — Zip Slip path traversal sink when extracting to filesystem.

archive/zip package. OpenReader() and File[].Name are sources of user-controlled filenames — Zip Slip path traversal when extracting.

Alias reference: database/sql.Stmt. Prepared statement execution methods — safe when using ? placeholders, sink when mixing with string concatenation.

time package. time.Parse() with user-controlled layout strings is a denial-of-service risk (algorithmic complexity). Not a typical injection sink.

plugin package. Open() loads a shared library — code execution sink when the plugin path is user-controlled.

crypto/hmac package. New() creates HMAC with a key. Equal() provides constant-time comparison. Using == instead of Equal() for MAC verification is a timing attack.

crypto/aes package. NewCipher() with a weak mode (ECB, CBC without IV) is a cryptographic weakness finding.

cipher package. NewGCMWithNonceSize() and AEAD.Seal() — finding when nonce is reused or predictable.

crypto/x509 package. Certificate.Verify() is the TLS chain validation entry point. Skipping verification or using empty VerifyOptions is a finding.

encoding/gob.Decoder. Decode() deserializes arbitrary Go values — unsafe deserialization when decoding user-supplied bytes.

Chi HTTP router (chi.Router and chi.Mux). Path parameters extracted via URLParam are taint sources. Chi is one of the most popular lightweight routers in the Go ecosystem.

Gorilla mux HTTP router (mux.Router). Path variables extracted via mux.Vars(r) are taint sources. Gorilla mux is the canonical router for larger Go web applications.

pgx PostgreSQL driver. Connection and Pool types expose Query/Exec/QueryRow that accept raw SQL strings — injection sinks when the SQL is built from user input. pgx is the recommended Postgres driver for new Go projects.

MongoDB Go driver Collection and Client. Queries built from user input via bson.D or bson.M with string interpolation are NoSQL injection sinks. The filter argument on Find/Update/Delete operations is where tainted input lands.

go-redis Client for Redis operations. Most Redis commands are typed and safe, but Eval() and EvalSha() accept Lua scripts that can be injection sinks when the script body is user-controlled. ACL commands can also be sinks.

gopkg.in/yaml.v3 Decoder for YAML deserialization. Decode() hydrates arbitrary Go types from YAML input — a deserialization sink when the YAML source is user-controlled. Package-level yaml.Unmarshal has the same properties.

github.com/spf13/viper is the de-facto Go configuration library. Values returned from Get* methods are sources when the config file itself contains untrusted fields (environment, remote KV stores). Write methods that persist config back are typically neutral.

google.golang.org/grpc.ServerTransportStream exposes transport-layer metadata for in-flight gRPC calls. Method() returns the fully-qualified gRPC method name — path-like and frequently user-influenced via client-supplied routing. Header/Trailer methods ship metadata back to the client.

The io standard library package. ReadAll and Copy move data from readers — sources when the underlying reader is user-controlled (e.g. an http.Request.Body). WriteString writes to a writer and is a sink when the writer is an HTTP response.

encoding/json for JSON encode/decode. Unmarshal and Decoder.Decode deserialize JSON into Go values — the destination struct becomes tainted if the input bytes are user-controlled. Encoder.Encode writes JSON to a writer, a sink when the writer is an HTTP response.

Go stdlib package — arena. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — bytes. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — cmp. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — compress/bzip2. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — compress/flate. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — compress/gzip. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — compress/lzw. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — compress/zlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — container/heap. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — container/list. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — container/ring. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/boring. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/des. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/dsa. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/ecdh. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/ecdsa. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/ed25519. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/elliptic. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/md5. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/rc4. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/rsa. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/sha1. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/subtle. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/tls/fipsonly. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — crypto/x509/pkix. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — database/sql/driver. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — debug/buildinfo. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — debug/dwarf. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — debug/elf. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — debug/gosym. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — debug/macho. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — debug/pe. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — debug/plan9obj. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — embed. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — encoding. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — encoding/ascii85. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — encoding/asn1. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — encoding/base32. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — encoding/pem. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — errors. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — expvar. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — flag. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/ast. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/build. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/build/constraint. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/constant. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/doc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/doc/comment. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/format. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/importer. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/parser. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/printer. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/scanner. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/token. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — go/types. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — hash. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — hash/adler32. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — hash/crc32. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — hash/crc64. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — hash/fnv. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — hash/maphash. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — html. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — image. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — image/color. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — image/color/palette. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — image/draw. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — image/gif. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — image/jpeg. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — image/png. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — index/suffixarray. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — io/ioutil. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — log/syslog. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — maps. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — math. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — math/big. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — math/bits. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — math/cmplx. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — mime. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — mime/quotedprintable. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/http/cgi. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/http/cookiejar. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/http/fcgi. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/http/httptest. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/http/httptrace. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/http/httputil. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/http/pprof. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/mail. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/netip. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/rpc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/rpc/jsonrpc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — net/textproto. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — os/signal. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — path. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — regexp/syntax. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/asan. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/cgo. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/coverage. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/debug. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/metrics. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/msan. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/pprof. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/race. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — runtime/trace. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — slices. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — sort. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — sync/atomic. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — syscall/js. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — testing. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — testing/fstest. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — testing/iotest. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — testing/quick. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — testing/slogtest. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — text/scanner. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — text/tabwriter. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — text/template/parse. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — time/tzdata. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — unicode. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — unicode/utf16. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — unicode/utf8. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go stdlib package — unsafe. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — cloud.google.com/go. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — github.com/aws/aws-sdk-go-v2. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — github.com/codeskyblue/go-sh. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — github.com/flosch/pongo2/v6. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — github.com/go-playground/validator/v10. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — github.com/pelletier/go-toml/v2. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — github.com/sirupsen/logrus. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — github.com/spf13/afero. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — github.com/stretchr/testify. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — go.uber.org/zap. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Go third-party package — k8s.io/client-go. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

The subprocess standard library module for spawning child processes. Most call APIs accept either a list[str] (safe) or a string with shell=True (command-injection sink when the string contains user input).

The os standard library module. os.system() and os.popen() always invoke a shell and are injection sinks. os.exec* variants avoid the shell but are still sinks for the program path. Environment accessors (os.environ, os.getenv) are sources.

The pickle module for Python object serialization. pickle.load() and pickle.loads() execute arbitrary code during deserialization via __reduce__ — always unsafe with untrusted input. Use json or signed payloads instead.

The marshal module for Python internal object serialization. Like pickle, marshal.load() / marshal.loads() execute code paths determined by the input bytes — unsafe on untrusted data. The module is undocumented for general use.

The sqlite3 module wraps the SQLite C library. cursor.execute() and executemany() accept raw SQL strings and are injection sinks when the SQL is built from user input. Use the ? placeholder form for safe parameter binding.

psycopg2 is the canonical PostgreSQL driver for Python. Cursor.execute() and executemany() are SQL injection sinks when the query is built by string concatenation or f-strings. Use %s placeholders for safe binding.

PyMongo is the official MongoDB driver for Python. Collection methods accept filter dicts; NoSQL injection occurs when filter dicts are built from user-supplied JSON that lets attackers inject $where, $regex, or operator keys.

redis-py is the de-facto Redis client for Python. Most commands are typed and safe. The main sinks are eval() and evalsha() which run Lua scripts — injection-sensitive when the script body is user-controlled.

Flask is a popular Python web microframework. The flask.request global exposes all HTTP input (args, form, json, files, headers, cookies) as taint sources. Response helpers like render_template (SSTI if template is user-controlled) and redirect (open-redirect) are sinks.

Django is a full-featured Python web framework. HttpRequest exposes request data; the ORM Manager.raw() and Cursor.execute() are SQL injection sinks when the SQL is built from user input. Template rendering via mark_safe bypasses auto-escaping (XSS sink).

FastAPI is a modern Python web framework built on Starlette and Pydantic. Path / query / body parameters declared on endpoints are sources. Response helpers inherited from Starlette include HTMLResponse and RedirectResponse (XSS and open-redirect sinks).

Jinja2 is the template engine behind Flask and many Python frameworks. Template(source).render() and Environment.from_string() evaluate template syntax — SSTI sink when the template source comes from user input. Autoescape only protects rendered output, not the template source itself.

requests is the most popular HTTP client for Python. All top-level methods and Session methods accept a URL as the first argument — SSRF sink when the URL is user-controlled. verify=False disables TLS verification (separate rule).

urllib.request (stdlib) is the lowest-level HTTP client in Python. urlopen() accepts both a URL string and a Request object — SSRF sink when the URL is user-controlled. Unlike requests, urlopen defaults to no TLS verification on some platforms.

PyYAML is the standard YAML library. yaml.load() with the default Loader (or UnsafeLoader / Loader) instantiates arbitrary Python classes — RCE sink on untrusted input. Use yaml.safe_load() or Loader=yaml.SafeLoader instead.

The os.path module for path manipulation. join() concatenates path components but does not resolve traversal sequences — path-traversal bug when joining a trusted base with a user-controlled path. Use os.path.commonpath + realpath containment checks to sanitize.

The tempfile module. mktemp() is deprecated and insecure (race condition between filename generation and open). Use NamedTemporaryFile, mkstemp, or TemporaryDirectory which atomically create the file.

The tarfile module. extractall() and extract() follow archive entry paths as-is — path-traversal sink (zip slip) when the archive is user-supplied and extractall's filter= argument is not set to a safe filter. Python 3.12 changed the default to 'data'.

The zipfile module. ZipFile.extractall() and extract() are zip-slip sinks when the archive is untrusted. Python's extractall resolves .. segments in archive members to paths outside the target directory.

The hashlib module provides cryptographic hash functions. md5 and sha1 are cryptographically broken — findings for password hashing / signature use. For password hashing use hashlib.scrypt, pbkdf2_hmac, or the passlib / argon2-cffi packages.

The hmac module for keyed message authentication. compare_digest is the only constant-time comparison helper — using ordinary == for MAC comparison is a timing-attack sink.

The secrets module provides cryptographically strong random values suitable for managing authentication tokens. Use secrets instead of the random module for session IDs, tokens, and CSRF nonces.

The random module uses a Mersenne Twister PRNG — NOT suitable for cryptography. random.random, random.choice, random.randint, and SystemRandom(..) should be flagged for security contexts. Use the secrets module for tokens, passwords, and keys.

The ssl module for TLS / SSL. SSLContext with verify_mode=CERT_NONE disables certificate validation (MITM risk). _create_unverified_context() is an explicit bypass — finding for any production code. Use create_default_context() for sane defaults.

The ast module exposes Python's abstract syntax tree. ast.literal_eval is a safe evaluator for literals only. The builtins eval() and exec() execute arbitrary Python code — RCE sinks on user input. compile() produces code objects that reach exec().

The json module for JSON encode / decode. Unlike pickle, json is safe by default — only parses primitives, lists, dicts. Still worth documenting because json.loads is a common source entry point and json.dumps on response values is where reflected XSS originates.

The http.client module provides low-level HTTP primitives. HTTPConnection / HTTPSConnection.request() is an SSRF sink when the host or path comes from user input. HTTPSConnection with context=None falls back to system default TLS settings.

The socket module for low-level network operations. socket.connect() is an SSRF primitive when the host / port comes from user input. socket.bind() on 0.0.0.0 is a finding for services that should be localhost-only.

The urllib.parse module for URL parsing and building. urljoin is commonly used to build request URLs — when the base is user-controlled, attackers can redirect to arbitrary hosts. urlparse can be used as a sanitizer for SSRF if the netloc is validated.

The ftplib module for FTP (insecure plaintext protocol). FTP() connects unencrypted; FTP_TLS is the secure variant. Any use of the plain FTP class is a finding for sensitive data flows.

The telnetlib module for Telnet (insecure plaintext protocol). Any use of Telnet is a finding; use paramiko / SSH instead. Deprecated since 3.11, removed in 3.13.

The smtplib module for SMTP. SMTP() uses plaintext unless starttls() is called. SMTP_SSL is the always-encrypted variant. Rule writers also target email header / recipient construction for header-injection sinks.

The pathlib module is the modern OO path API. Path.resolve() expands symlinks (sanitizer when combined with containment check). Path.open / read_text / write_text are file I/O sinks when the path is user-controlled.

The shutil module for high-level file operations. unpack_archive automatically extracts tar / zip / gztar / bztar / xztar archives — same zip-slip risks as tarfile.extractall. copytree can also be used for path-traversal.

The shlex module provides shell-compatible tokenization and quoting. shlex.quote is the canonical sanitizer for shell=True command construction. shlex.split is safer than splitting yourself, but quote is what protects against shell-metacharacter injection.

xml.etree.ElementTree is the stdlib XML parser. The C-accelerated parser has some built-in protections but still processes external entities in some configurations — XXE sink. Prefer defusedxml for untrusted XML.

xml.sax is the stdlib SAX parser. By default it resolves external entities — XXE sink on untrusted XML. Disable with parser.setFeature(feature_external_ges, False) or use defusedxml.sax.

xml.dom.minidom for DOM-style XML parsing. Built on pyexpat which by default does not resolve external entities, but custom resolvers can reintroduce XXE. defusedxml.minidom is the hardened replacement.

xmlrpc.client and xmlrpc.server. ServerProxy RPCs execute arbitrary methods — dispatch on untrusted method names is a sink. ServerProxy + HTTP (not HTTPS) transmits credentials in plaintext.

The zlib module for compression. decompress() on untrusted input can consume unbounded memory (zip bomb / decompression amplification). Set max_length to cap output.

The shelve module persists arbitrary Python objects — backed by pickle under the hood. shelve.open() on untrusted files is a deserialization sink (RCE via pickle's __reduce__).

The logging module. Most uses are neutral. Log-injection findings arise when user-controlled data is logged without sanitization — attackers can break log line boundaries with \n or forge subsequent log entries.

SQLAlchemy is the most-used Python ORM. The text() wrapper and raw execute() are SQL injection sinks when the SQL is built from user input. Core and ORM query APIs with bound parameters are safe.

PyMySQL is a pure-Python MySQL driver. Cursor.execute() accepts a raw query and parameter tuple — injection sink when the query is built from user input without the %s placeholder.

MySQLdb (mysqlclient) is a C-extension MySQL driver. Cursor.execute() is an SQL injection sink when the query is built without %s placeholders.

httpx is a modern async-capable HTTP client. Identical SSRF surface to requests — the URL argument on get/post/etc is a sink when user-controlled. verify=False disables TLS verification (separate rule).

httplib2 is an HTTP client with advanced caching features. Http.request() is an SSRF sink when the URI is user-controlled.

lxml is the C-backed XML / HTML parser. etree.parse / fromstring with a custom XMLParser(resolve_entities=True) is an XXE sink. Default behavior in recent lxml is safer but the API still allows unsafe configurations.

defusedxml is the hardened XML parser suite. It wraps xml.etree, xml.sax, xml.dom, lxml etc. with external-entity resolution disabled. Using defusedxml counterparts is the recommended sanitizer for XML sources.

python-jose implements JWT / JWS / JWE. jwt.decode() is the canonical validation entry point. Finding when algorithms=['none'] is passed (unsigned token acceptance) or verify_signature=False.

Authlib is a comprehensive OAuth / OpenID / JWT library. JsonWebToken.decode() and the OAuth client Client.parse_request_body_response track access-token flows.

paramiko is the SSH / SFTP client for Python. SSHClient.set_missing_host_key_policy with AutoAddPolicy() silently trusts unknown hosts — MITM risk. exec_command() is a command-execution sink when the command is user-controlled.

ldap3 is a pure-Python LDAP client. Connection.search() accepts a search_filter — LDAP injection sink when the filter is built from user input without escaping. Use ldap3.utils.conv.escape_filter_chars() for safe construction.

bleach is an HTML sanitizer library. bleach.clean() strips dangerous tags and attributes — sanitizer for XSS flows. bleach.linkify() is also safe.

Werkzeug is the WSGI toolkit Flask is built on. safe_join() is the canonical path-traversal sanitizer for serving files. utils.redirect is where Flask's open-redirect surface originates.

jsonschema validates JSON documents against a schema. validate() is a sanitizer for shape-checking untrusted JSON before passing fields to other sinks.

Pydantic provides strict type-validated models. BaseModel parses / coerces input and raises on mismatch — the parsed model is a sanitizer for the raw input. Still, string fields on the model can remain tainted (not magically escaped).

boto3 is the AWS SDK for Python. client('s3').get_object(...) and similar operations commonly ingest user input into bucket / key names — SSRF-like vectors through S3 URLs and IAM misconfiguration. Covering for rule writers that check AWS-specific patterns.

aiofiles provides async file I/O. aiofiles.open() is a path-traversal sink when the path is user-controlled (same as built-in open).

The html module. html.escape() is the canonical XSS sanitizer for writing user input into HTML text content. html.unescape() does the inverse and should NOT be used on output paths.

string.Template and string.Formatter. Template($var) substitution is safe when placeholders are explicit. Formatter.format() with user-controlled format_spec is a format-string injection vector.

The re module. Catastrophic backtracking in regex patterns (ReDoS) — finding when a user-controlled pattern flows into re.compile / re.search / re.match. Also, re.findall on untrusted HTML is a common anti-pattern that misses cases.

The ipaddress module for IP address parsing and classification. IPv4Address / IPv6Address constructors raise on invalid input — sanitizer for IP flows. is_private / is_loopback / is_reserved are building blocks for SSRF defense.

The csv module. csv.writer + writerow on user-controlled cells produces CSV-formula injection when the receiver opens the CSV in Excel (cells starting with =, +, -, @ are interpreted as formulas). No stdlib sanitizer — prefix with a tab or apostrophe.

The email package. email.message.EmailMessage assembly with user-controlled Subject, To, From, or body is an email-header-injection sink (CRLF in header values can inject extra headers). email.parser handles incoming messages — sources of user content.

The configparser module reads INI-style config files. Values read via get() are sources when the config file is user-supplied. The module itself has no injection sinks of its own.

The http.server module. SimpleHTTPRequestHandler serves files from the current working directory — path-traversal sink on directory containing secrets. Intended for development only, finding on any production use.

The http.cookies module for cookie parsing. SimpleCookie accepts raw Cookie headers — the parsed morsels carry user input. Setting a cookie without Secure / HttpOnly / SameSite is a common hardening finding.

The imaplib module. IMAP4() uses plaintext; IMAP4_SSL is the encrypted variant. Any use of plain IMAP is a credential-over-plaintext finding.

The poplib module. POP3() is plaintext; POP3_SSL encrypts. Plaintext POP3 is a credential-over-plaintext finding.

The cgi module (deprecated in 3.11, removed in 3.13). cgi.FieldStorage collects form data for CGI scripts — each field value is a source. Any new code should not use cgi.

The wsgiref module for WSGI utilities. simple_server.make_server is dev-only — production should use gunicorn or waitress. util.request_uri reconstructs the URL from environ and is a source.

The getpass module. getpass.getpass() prompts for a password without echoing. getpass.getuser() returns the current user — source when used for authorization decisions.

The glob module. glob.glob() resolves shell-style patterns against the filesystem — finding when the pattern is user-controlled (can enumerate directories outside intended scope).

The ctypes module for calling C libraries. LoadLibrary / CDLL on user-controlled paths loads arbitrary code — code-execution sink. String pointer operations can also be memory-safety findings.

The crypt module (deprecated in 3.11, removed in 3.13). crypt.crypt() wraps the Unix crypt(3) call. Most default methods are weak (DES, MD5). Use passlib or hashlib.scrypt / pbkdf2_hmac instead.

The dbm family (dbm.gnu, dbm.ndbm, dbm.dumb). dbm.open() on untrusted files reads a DBM-format database. dbm.dumb is pickle-like and unsafe on untrusted input.

aiohttp provides async HTTP client and server. ClientSession.get / post and the top-level request() are SSRF sinks on user-controlled URLs. aiohttp.web request handlers expose sources via request.query, request.post, request.json.

Starlette is the ASGI toolkit behind FastAPI. Request exposes HTTP input; the responses module provides HTMLResponse / RedirectResponse / FileResponse (sinks for XSS, open-redirect, path-traversal respectively).

Django REST Framework (DRF). request.data is the primary source for JSON / form payloads; serializers validate input (sanitizer when is_valid is called with raise_exception=True). Response() with tainted data is generally safe due to DRF's renderers but render_template is still worth watching.

flask-cors configures CORS headers on Flask apps. CORS(app, origins='*') with supports_credentials=True is a major finding (wildcard origin with credentials is explicitly forbidden by browsers but some configurations still emit it).

werkzeug.security provides generate_password_hash and check_password_hash. The default method is pbkdf2:sha256 with 600_000 iterations. Findings arise when method='plain' or a weak hasher is passed explicitly.

PyJWT decodes and validates JWTs. jwt.decode() with algorithms=['none'] or options={'verify_signature': False} accepts unsigned tokens — major finding. Always pass algorithms explicitly.

oauthlib implements the OAuth 1 / OAuth 2 protocols. WebApplicationClient.parse_request_uri_response extracts the authorization code from the callback URL — source for subsequent token exchange.

The cryptography package provides recipes (Fernet) and primitives (hazmat). Fernet is the recommended symmetric encryption helper. Findings arise when hazmat primitives are used with obsolete algorithms (MD5, DES, RC4) or ECB mode.

hvac is the Python client for HashiCorp Vault. Client.secrets.kv.v2.read_secret_version reads a secret — the returned payload is a source. Client() with verify=False disables TLS verification (major finding).

pycurl wraps libcurl. curl.setopt(pycurl.URL, ...) is an SSRF sink on user-controlled URLs. setopt(pycurl.SSL_VERIFYPEER, 0) disables TLS verification.

pysftp wraps paramiko with a simpler SFTP interface. Connection(host, cnopts=...) with CnOpts.hostkeys=None disables host-key checking — MITM finding.

The docker SDK. DockerClient.containers.run with privileged=True is a container-escape finding. volumes mounting /var/run/docker.sock into the container grants full Docker daemon access.

Celery is a distributed task queue. Celery(broker=..., backend=...) configures brokers — findings when broker URL has insecure defaults (redis:// without TLS, amqp:// without TLS). @task decorators accept arbitrary user-controlled args via the queue.

waitress is a production WSGI server. serve() with host='0.0.0.0' exposes the app to all interfaces — finding for internal-only services.

gunicorn is a production WSGI server. Commonly run via CLI but programmatic use via Application() is possible. bind '0.0.0.0:*' on internal apps is a finding.

pyasn1 decodes ASN.1 structures. der_decoder.decode() on untrusted DER bytes can trigger denial-of-service via deep nesting. Typically used in certificate / LDAP contexts.

dockerfile_parse parses Dockerfiles. Returned structures reflect user-controlled file content. Usually a source for linting rules, not a sink.

toml parses TOML configuration. toml.load() is a neutral data loader — values become sources when the config file is user-supplied. tomllib (stdlib, 3.11+) is the modern replacement.

xmltodict parses XML into nested dicts (uses expat under the hood). Entity expansion is disabled by default, but the module's parse() still exposes untrusted XML to the app. Not a full XXE defense.

WTForms provides form validation for Flask / Django-style apps. Form().validate_on_submit() is a sanitizer for field-level validation. Still, string field values reach templates / SQL if fed directly without additional escaping.

django-filter builds Django QuerySet filters from query params. FilterSet.qs runs the filtered query — injection is impossible via the FilterSet, but custom filter methods that build raw SQL are sinks.

pexpect spawns interactive subprocesses with expect/respond patterns. spawn(cmd, ...) on user-controlled cmd is a command-injection sink, equivalent to subprocess with shell=True.

cffi calls C libraries without writing a C extension. FFI.dlopen() loads a shared library at runtime — code-execution sink on user-controlled path. FFI.cdef parses C declarations — neutral unless the definitions are user-controlled.

Python stdlib module — abc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — aifc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — antigravity. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — argparse. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — array. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — asynchat. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — asyncio. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — asyncore. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — atexit. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — audioop. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — base64. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — bdb. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — binascii. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — bisect. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — bz2. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — cProfile. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — calendar. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — cgitb. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — chunk. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — cmath. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — cmd. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — code. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — codecs. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — codeop. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — collections. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — colorsys. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — compileall. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — concurrent. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — contextlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — contextvars. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — copy. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — copyreg. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — curses. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — dataclasses. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — datetime. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — decimal. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — difflib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — dis. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — distutils. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — doctest. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — encodings. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — ensurepip. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — enum. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — errno. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — faulthandler. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — fcntl. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — filecmp. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — fileinput. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — fnmatch. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — fractions. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — functools. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — gc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — genericpath. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — getopt. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — gettext. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — graphlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — grp. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — gzip. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — heapq. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — idlelib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — imghdr. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — imp. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — importlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — inspect. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — io. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — itertools. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — keyword. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — lib2to3. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — linecache. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — locale. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — lzma. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — mailbox. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — mailcap. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — math. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — mimetypes. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — mmap. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — modulefinder. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — multiprocessing. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — netrc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — nntplib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — ntpath. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — nturl2path. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — numbers. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — opcode. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — operator. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — optparse. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — ossaudiodev. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pdb. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pickletools. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pipes. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pkgutil. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — platform. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — plistlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — posix. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — posixpath. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pprint. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — profile. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pstats. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pty. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pwd. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — py_compile. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pyclbr. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pydoc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pydoc_data. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — pyexpat. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — queue. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — quopri. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — readline. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — reprlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — resource. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — rlcompleter. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — runpy. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — sched. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — select. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — selectors. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — signal. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — site. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — smtpd. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — sndhdr. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — socketserver. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — spwd. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — sre_compile. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — sre_constants. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — sre_parse. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — stat. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — statistics. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — stringprep. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — struct. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — sunau. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — symtable. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — sys. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — sysconfig. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — syslog. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — tabnanny. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — termios. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — textwrap. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — this. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — threading. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — time. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — timeit. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — tkinter. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — token. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — tokenize. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — trace. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — traceback. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — tracemalloc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — tty. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — turtle. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — turtledemo. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — types. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — typing. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — unicodedata. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — unittest. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — uu. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — uuid. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — venv. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — warnings. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — wave. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — weakref. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — webbrowser. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — xdrlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — zipapp. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — zipimport. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Python stdlib module — zoneinfo. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — Jetson. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — RPi. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — Xlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — antlr4. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — assertpy. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — atheris. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — auth0. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — aws_xray_sdk. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — behave. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — binaryornot. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — boltons. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — braintree. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — cachetools. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — capturer. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — channels. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — chevron. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — click. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — click_default_group. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — click_log. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — click_shell. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — click_spinner. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — click_web. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — colorama. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — colorful. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — consolemenu. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — convertdate. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — croniter. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — datauri. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — dateparser_data. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — dateutil. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — decorator. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — deprecated. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — dirhash. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — docutils. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — editdistance. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — entrypoints. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — ephem. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — et_xmlfile. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — fanstatic. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — first. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flake8. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flake8_bugbear. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flake8_builtins. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flake8_docstrings. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flake8_rst_docstrings. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flake8_simplify. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flake8_typing_imports. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flask_migrate. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — flask_socketio. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — fpdf. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — gdb. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — geopandas. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — gevent. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — greenlet. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — grpc. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — grpc_channelz. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — grpc_health. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — grpc_reflection. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — grpc_status. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — hdbcli. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — hnswlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — html5lib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — ibm_db. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — icalendar. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — import_export. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — inifile. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — jack. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — jenkins. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — jks. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — jmespath. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — jsonnet. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — jwcrypto. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — keyboard. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — lunardate. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — lupa. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — lzstring. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — m3u8. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — markdown. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — mock. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — mypy_extensions. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — nanoid. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — nanoleafapi. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — netaddr. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — netifaces. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — networkx. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — nmap. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — objgraph. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — olefile. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — openpyxl. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — opentracing. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — parsimonious. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — passpy. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pep8_naming. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pika. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — playhouse. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — polib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pony. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — portpicker. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — psutil. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — punq. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pyaudio. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pyautogui. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pycocotools. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pyfarmhash. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pyflakes. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pygments. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pyi_splash. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pyluach. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pymeeus. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pynput. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pyperclip. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pyscreeze. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pysocks. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pytest_lazy_fixture. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — python_crontab. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — python_http_client. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pythonwin. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — pytz. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — qrbill. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — qrcode. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — ratelimit. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — regex. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — reportlab. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — requests_oauthlib. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — resampy. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — retry. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — rfc3339_validator. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — s2clientprotocol. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — seaborn. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — send2trash. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — serial. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — shapely. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — simple_websocket. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — simplejson. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — singledispatch. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — six. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — slumber. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — str2bool. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — tabulate. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — tensorflow. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — tgcrypto. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — toposort. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — tqdm. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — translationstring. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — ttkthemes. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — tzdata. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — unidiff. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — untangle. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — usersettings. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — uwsgi. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — vobject. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — watchpoints. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — webencodings. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — webob. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — whatthepatch. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — workalendar. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — wurlitzer. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — www_authenticate. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — xdg. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — xdgenvpy. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — xlrd. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — xmldiff. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — yt_dlp. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — zstd. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Third-party Python package module — zxcvbn. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.