PyCQA/autoflake

No problems traced to this repository code in these checks.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Unused variables are removed when --remove-unused-variables is given: Real input produced the expected result: return 2

  Source: To remove unused variables, use the ``--remove-unused-variables`` option.

  Input: def f(): x = 1 return 2

  Expected: def f(): return 2

  Command: autoflake --remove-unused-variables -

  Observed: return 2

• autoflake removes useless pass statements by default: Real input produced the expected result: return 1

  Source: autoflake also removes useless ``pass`` statements by default.

  Input: def f(): pass return 1

  Expected: def f(): return 1

  Command: autoflake -

  Observed: return 1

• All unused imports, including non-stdlib ones, are removed with --remove-all-unused-imports: Real input produced the expected result: print(1)

  Source: library), use the ``--remove-all-unused-imports`` option.

  Input: import requests import os print(1)

  Expected: print(1)

  Command: autoflake --remove-all-unused-imports -

  Observed: print(1)

Examples

• Run the documented unit tests: command completed successfully

  Source: README.md Tests section

  Input: ./test_autoflake.py (no arguments)

  Expected: exit 0, suite passes (178 tests OK)

  Command: ./test_autoflake.py

  Observed: --remove-rhs-for-unused-variables] [--ignore-pass-statements] [--ignore-pass-after-docstring] [--version] [--quiet] [-v] [--stdin-display-name STDIN_DISPLAY_NAME] [--config CONFIG_FILE] [-i | -s] files [files ...] autoflake: error: argument -s/--stdout: not allowed with argument -i/--in-place .......................................................................................................................... ---------------------------------------------------------------------- Ran 178 tests in 3.237s OK

• Run the documented fuzz test on a Python file: command completed successfully

  Source: README.md Tests section

  Input: ./test_fuzz.py --verbose <guest-path>

  Expected: exit 0, prints a diff of autoflake changes and before/after pyflakes counts

  Command: ./test_fuzz.py --verbose <guest-path>

  Observed: (before, after): (4, 1) ---> Testing with <guest-path> --- <guest-path> +++ <guest-path> @@ -1,7 +1,4 @@ import math -import re -import os -import sys def foo():

• Show the diff for the README example: command completed successfully

  Source: README.md Example section

  Input: autoflake --remove-unused-variables <guest-path>

  Expected: diff output without modifying the file

  Command: autoflake --remove-unused-variables <guest-path>

  Observed: --- original/<guest-path> +++ fixed/<guest-path> @@ -1,9 +1,5 @@ import math -import re -import os -import sys def foo(): - unused = 1 return math.pi

Local or hosted: local

Install autoflake from the pinned source and remove unused imports/variables/pass statements from Python code via the autoflake CLI, plus run the documented unit and fuzz tests

cd <guest-path> && pwd && ls -la && id -u && python3 --version && git -C . rev-parse HEAD 2>&1 | head -1; cat README.md 2>/dev/null | head -150
cd <guest-path> && sed -n 150,400p README.md; ls .github/workflows; cat pyproject.toml; ls -la .coldpass; which pip3 uv; python3 -m venv --help >/dev/null 2>&1 && echo venv_ok
cd /tmp && python3 -m venv <guest-path> && <guest-path> install -q --upgrade pip 2>&1 | tail -3; <guest-path> install <guest-path> 2>&1 | tail -5; ls <guest-path>
export PATH=<guest-path>; autoflake --version; mkdir -p <guest-path> && printf 'import math\nimport re\nimport os\nimport sys\n\n\ndef foo():\n    unused = 1\n    return math.pi\n' > <guest-path> && cp <guest-path> <guest-path> && printf 'import math\nimport os\nprint(math.pi)\n' | autoflake -; echo "rc=$?"; autoflake --remove-unused-variables <guest-path>; echo "rc=$?"
export PATH=<guest-path>; printf 'def f():\n    x = 1\n    return 2\n' | autoflake --remove-unused-variables -; echo "rc=$?"; printf 'import os\nimport sys\nprint(sys.argv)\n' | autoflake --check -; echo "check_rc=$?"; printf 'def f():\n    pass\n    return 1\n' | autoflake -; echo "rc=$?"
cd <guest-path> && export PATH=<guest-path> && timeout 600 ./test_autoflake.py 2>&1 | tail -15; echo "rc=${PIPESTATUS[0]}"
export PATH=<guest-path>; printf 'import requests\nimport os\nprint(1)\n' | autoflake --remove-all-unused-imports -; echo "rc=$?"; printf 'import requests\nprint(1)\n' | autoflake -; echo "default_rc=$?"
cd <guest-path> && cat > probe.json <<'EOF'
{"kind":"cli","argv":["autoflake","--remove-unused-variables","-"],"cwd":"<guest-path>","stdin":"def f():\n    x = 1\n    return 2\n","env":{"PATH":"<guest-path>"},"expected_text":"return 2"}
EOF
cat > claims.json <<'EOF'
[
{"kind":"claim","claim":"Unused variables are removed when --remove-unused-variables is given","source":"README.md","quote":"To remove unused variables, use the ``--remove-unused-variables`` option.","input":"def f():\n    x = 1\n    return 2\n","expected":"def f():\n    return 2","probe_kind":"cli","argv":["autoflake","--remove-unused-variables","-"],"stdin":"def f():\n    x = 1\n    return 2\n","expected_text":"return 2","cwd":"<guest-path>","env":{"PATH":"<guest-path>"}},
{"kind":"claim","claim":"autoflake removes useless pass statements by default","source":"README.md","quote":"autoflake also removes useless ``pass`` statements by default.","input":"def f():\n    pass\n    return 1\n","expected":"def f():\n    return 1","probe_kind":"cli","argv":["autoflake","-"],"stdin":"def f():\n    pass\n    return 1\n","expected_text":"return 1","cwd":"<guest-path>","env":{"PATH":"<guest-path>"}},
{"kind":"claim","claim":"All unused imports, including non-stdlib ones, are removed with --remove-all-unused-imports","source":"README.md","quote":"library), use the ``--remove-all-unused-imports`` option.","input":"import requests\nimport os\nprint(1)\n","expected":"print(1)","probe_kind":"cli","argv":["autoflake","--remove-all-unused-imports","-"],"stdin":"import requests\nimport os\nprint(1)\n","expected_text":"print(1)","cwd":"<guest-path>","env":{"PATH":"<guest-path>"}}
]
EOF
python3 -I -c 'import json;json.load(open("probe.json"));json.load(open("claims.json"));print("json ok")'
cd <guest-path> && export PATH=<guest-path> && timeout 300 ./test_fuzz.py --verbose <guest-path> 2>&1 | tail -8; echo "fuzz_rc=${PIPESTATUS[0]}"; cat <guest-path> | head -3
cd <guest-path> && cat > cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README.md, pyproject.toml, autoflake.py entry point (autoflake:main), and .github workflows. autoflake is a one-shot command-line tool that processes the files or stdin it is given and exits; it contains no cron, scheduler, loop, webhook, --once or --now trigger. CI workflow schedules are not product cycles.","checks":[]}
EOF
cat > examples.json <<'EOF'
[
{"kind":"example","claim":"Run the documented unit tests","source":"README.md Tests section","input":"./test_autoflake.py (no arguments)","expected":"exit 0, suite passes (178 tests OK)","argv":["./test_autoflake.py"],"cwd":"<guest-path>","env":{"PATH":"<guest-path>"}},
{"kind":"example","claim":"Run the documented fuzz test on a Python file","source":"README.md Tests section","input":"./test_fuzz.py --verbose <guest-path>","expected":"exit 0, prints a diff of autoflake changes and before/after pyflakes counts","argv":["./test_fuzz.py","--verbose","<guest-path>"],"cwd":"<guest-path>","env":{"PATH":"<guest-path>"},"expected_text":"(before, after): (4, 1)"},
{"kind":"example","claim":"Show the diff for the README example","source":"README.md Example section","input":"autoflake --remove-unused-variables <guest-path>","expected":"diff output without modifying the file","argv":["autoflake","--remove-unused-variables","<guest-path>"],"cwd":"<guest-path>","env":{"PATH":"<guest-path>"},"expected_text":"-    unused = 1"}
]
EOF
python3 -I -c 'import json;[json.load(open(f)) for f in ["cycles.json","examples.json"]];print("ok")'
cd <guest-path> && cat > report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Install autoflake from the pinned source and remove unused imports/variables/pass statements from Python code via the autoflake CLI, plus run the documented unit and fuzz tests","operation_scope":"Linux guest, Python 3.12.3 (README requires >=3.10), venv at <guest-path>, pip install of the local source tree (autoflake 2.4.0, pyflakes 4.0.3). No network services or credentials needed. Browser not used.","steps":["python3 -m venv <guest-path>","<guest-path> install <guest-path>","autoflake --version","printf ... | autoflake - (README default stdin mode)","autoflake --remove-unused-variables <guest-path> (README Example)","printf ... | autoflake --remove-unused-variables -","printf ... | autoflake --remove-all-unused-imports -","./test_autoflake.py (README Tests: 178 tests OK)","./test_fuzz.py --verbose <guest-path> (README Tests)"],"deviations":["Workspace was not a git repository and the Git-metadata pin step was not run; the source snapshot was installed directly from <guest-path> which is the pinned autoflake 2.4.0 tree.","Installed with pip from the local source path instead of 'pip install --upgrade autoflake' from PyPI, so the tested code is the pinned snapshot rather than the latest PyPI release.","Used a venv with PATH set in probe env rather than an activated shell; no product flags changed.","README's -i/--in-place example was not run on the workspace; the diff mode and stdin mode were used instead to avoid modifying files."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
python3 -I -c 'import json;print(json.load(open("report.json"))["outcome"])'; cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -40
cd <guest-path> && cat > claims.json <<'EOF'
[
{"kind":"claim","claim":"Unused variables are removed when --remove-unused-variables is given","source":"To remove unused variables, use the ``--remove-unused-variables`` option.","input":"def f():\n    x = 1\n    return 2\n","expected":"def f():\n    return 2","probe_kind":"cli","argv":["autoflake","--remove-unused-variables","-"],"stdin":"def f():\n    x = 1\n    return 2\n","expected_text":"return 2","cwd":"<guest-path>","env":{"PATH":"<guest-path>"}},
{"kind":"claim","claim":"autoflake removes useless pass statements by default","source":"autoflake also removes useless ``pass`` statements by default.","input":"def f():\n    pass\n    return 1\n","expected":"def f():\n    return 1","probe_kind":"cli","argv":["autoflake","-"],"stdin":"def f():\n    pass\n    return 1\n","expected_text":"return 1","cwd":"<guest-path>","env":{"PATH":"<guest-path>"}},
{"kind":"claim","claim":"All unused imports, including non-stdlib ones, are removed with --remove-all-unused-imports","source":"library), use the ``--remove-all-unused-imports`` option.","input":"import requests\nimport os\nprint(1)\n","expected":"print(1)","probe_kind":"cli","argv":["autoflake","--remove-all-unused-imports","-"],"stdin":"import requests\nimport os\nprint(1)\n","expected_text":"print(1)","cwd":"<guest-path>","env":{"PATH":"<guest-path>"}}
]
EOF
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -40
cd <guest-path> && ls -la; ls -la .coldpass; git status 2>/dev/null | head -1; ls tmp.* 2>/dev/null | head