highexit 1
- package has file that runs on every Python start like
.pth, sitecustomize.py - package adds capability: network, process, environment, native code or
TOP, and where it enters; or one of them reaching more code - package changed with new
eval, exec or deserialization, or changes module at run time - package contains native binary: native binary detected. not checked. It is not checked by algobank currently.
- package adds new dependency
- sdist (source distribution): build code not analyzed (
TOP) - package is known malicious/vulnerable release or contains known malicious file
warningexit unchanged
- a called package not algobanked in the same run
mediumexit unchanged
- new file access
- new code using network, process, environment, native code or
TOP that it already used - new computed imports or attributes,
__getattr__, import * - a new entry point or installed script
lowexit unchanged
- new code using file access it already used
- a changed or removed dependency
- new or changed data files
infoexit unchanged
- the scope each function uses
- dynamic code each function contains