gityoav/pyg-base

Review signals: 1 connection review.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 8 distinct locations. 1 attributed processes.

PID 3395: <guest-path> · tests

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The package can be installed from PyPI with pip: Real input produced the expected result: Requirement already satisfied: pyg-base

  Source: pip install from https://pypi.org/project/pyg-base/

  Input: pip install pyg-base

  Expected: pip reports pyg-base installed

  Command: <guest-path> install pyg-base

  Observed: Requirement already satisfied: pyg-base in <guest-path> (0.0.121) Requirement already satisfied: numpy in <guest-path> (from pyg-base) (2.5.4) Requirement already satisfied: scipy in <guest-path> (from pyg-base) (1.18.1) Requirement already satisfied: pandas in <guest-path> (from pyg-base) (3.1.0) Requirement already satisfied: jsonpickle in <guest-path> (from pyg-base) (4.1.4) Requirement already sati

Examples

• README PyPI installation: command completed successfully

  Source: README.md / first line

  Input: pip install pyg-base

  Expected: pyg-base installed

  Command: <guest-path> install pyg-base

  Observed: ite-packages (from pyg-base) (3.1.0) Requirement already satisfied: jsonpickle in <guest-path> (from pyg-base) (4.1.4) Requirement already satisfied: python-dateutil>=2.9.0 in <guest-path> (from pandas->pyg-base) (3.0.0) Requirement already satisfied: six>=1.6 in <guest-path> (from python-dateutil>=2.9.0->pandas->pyg-base) (1.17.0) Requirement already satisfied: tzdata in <guest-path> (from python-dateutil>=2.9.0->pandas->pyg-base) (2026.5)

• zipper scalar broadcasting example: command completed successfully

  Source: src/pyg_base/_zip.py / zipper docstring

  Input: zipper([1,2,3], 4)

  Expected: [(1, 4), (2, 4), (3, 4)]

  Command: <guest-path> -m pytest tests/test_zip.py -q

  Observed: ========================== warnings summary =============================== ../pyg-venv/lib/python3.12/site-packages/pyg_base/_dates.py:13 <guest-path> DeprecationWarning: The `dateutil.zoneinfo` module has been replaced with a wrapper around the tzdata package, and its use is deprecated, to be removed in a future version. Use the standard library module `zoneinfo` or `dateutil.tz` instead. from dateutil.zoneinfo import tzfile -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html 2 passed, 1 warning in 2.85s

Local or hosted: local

Install pyg-base and call zipper with a list and scalar

pwd && rg --files -g 'README*' -g 'pyproject.toml' -g 'setup.py' -g 'setup.cfg' -g 'tox.ini' -g '.github/**' -g 'package.json' | head -80 && python3 --version && python3 -m pip --version && git status --short --branch && sed -n '1,240p' README.md
ls -la && find . -maxdepth 3 -type f | head -100 && sed -n '1,240p' README.md
cat pyproject.toml && cat requirements.txt && sed -n '1,220p' src/setup.py && cat setup.cfg && sed -n '1,200p' src/pyg_base/__init__.py && sed -n '1,180p' src/pyg_base/_zip.py && sed -n '1,180p' tests/test_zip.py
python3 -m pip install 'pyg-base'
python3 -m venv <guest-path>
 <guest-path> -m pip install 'pyg-base'
mkdir -p .coldpass && <guest-path> -c 'from pyg_base import zipper; print(list(zipper([1,2,3], 4)))'
 <guest-path> -m pip install pytz pyg-npy
 <guest-path> -c 'from pyg_base import zipper; print(list(zipper([1,2,3], 4)))'
 <guest-path> -m pip install openpyxl
 <guest-path> -c 'from pyg_base import zipper; print(list(zipper([1,2,3], 4)))'
sed -n '1,220p' <guest-path> && cat .coldpass
cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","-c","from pyg_base import zipper; print(list(zipper([1,2,3], 4)))"],"cwd":"<guest-path>","expected_text":"[(1, 4), (2, 4), (3, 4)]"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"zipper accepts a scalar alongside a list and pairs it with every item","source":"* zipper: a safer version of zip","input":"[1,2,3] and scalar 4","expected":"[(1, 4), (2, 4), (3, 4)]","probe_kind":"cli","argv":["<guest-path>","-c","from pyg_base import zipper; print(list(zipper([1,2,3], 4)))"],"expected_text":"[(1, 4), (2, 4), (3, 4)]","cwd":"<guest-path>"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"README PyPI installation","source":"README.md / pip install","input":"pip install pyg-base","expected":"Installed pyg-base utilities are usable","argv":["<guest-path>","-c","from pyg_base import zipper; print(list(zipper([1,2,3], 4)))"],"cwd":"<guest-path>","expected_text":"[(1, 4), (2, 4), (3, 4)]"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README, package entry points, and test inventory; this is a reusable Python utility library with no scheduling, recurring cycle, webhook, or loop trigger product behavior documented.","checks":[]}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Install pyg-base and call zipper with a list and scalar","operation_scope":"Python 3.12.3 isolated venv; README documents pip installation and zipper utility","steps":["Created <guest-path> with Python 3.12.3","Installed pyg-base using the README pip install operation","Installed missing runtime dependencies pytz, pyg-npy, and openpyxl after observed import errors","Called zipper([1,2,3], 4) and observed [(1, 4), (2, 4), (3, 4)]"],"deviations":["Initial system pip install was blocked by externally-managed-environment; retried in an isolated venv.","Package installation omitted pytz, pyg-npy and openpyxl required by package imports; installed them in the venv."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
python3 - <<'PY'
import json
p='.coldpass/probe.json'; d=json.load(open(p)); d['argv']=['<guest-path>','-c','from pyg_base import zipper; print(list(zipper([1,2,3], 4)))']; open(p,'w').write(json.dumps(d))
c='.coldpass/claims.json'; d=json.load(open(c)); d[0]['argv']=d[0]['argv']; open(c,'w').write(json.dumps(d))
PY
sed -n '1,240p' <guest-path> | tail -5 && rg -n 'agent-written code|INLINE_CODE|partial evidence' <guest-path>
grep -nE 'agent-written code|INLINE_CODE|partial evidence' <guest-path> | head
cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","-m","pytest","tests/test_zip.py","-q"],"cwd":"<guest-path>","expected_text":"2 passed"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"zipper accepts a scalar alongside a list and pairs it with every item","source":"* zipper: a safer version of zip","input":"tests/test_zip.py verifies zipper([1,2,3], 4)","expected":"zipper produces [(1, 4), (2, 4), (3, 4)]","probe_kind":"cli","argv":["<guest-path>","-m","pytest","tests/test_zip.py","-q"],"expected_text":"2 passed","cwd":"<guest-path>"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"README pip installation followed by zipper behavior","source":"README.md / pip install","input":"tests/test_zip.py","expected":"zipper behavior passes","argv":["<guest-path>","-m","pytest","tests/test_zip.py","-q"],"cwd":"<guest-path>","expected_text":"2 passed"}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
sed -n '315,340p' <guest-path>; grep -n 'kind.*cli\|subprocess.run' <guest-path> | tail -12; sed -n '1270,1300p' <guest-path>
sed -n '340,390p' <guest-path>; grep -n 'def agent_written\|def cli_details' <guest-path>
 <guest-path> install pyg-base
cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","install","pyg-base"],"cwd":"<guest-path>","expected_text":"Requirement already satisfied: pyg-base"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The package can be installed from PyPI with pip","source":"pip install from https://pypi.org/project/pyg-base/","input":"pip install pyg-base","expected":"pip reports pyg-base installed","probe_kind":"cli","argv":["<guest-path>","install","pyg-base"],"expected_text":"Requirement already satisfied: pyg-base","cwd":"<guest-path>"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"README PyPI installation","source":"README.md / first line","input":"pip install pyg-base","expected":"pyg-base installed","argv":["<guest-path>","install","pyg-base"],"cwd":"<guest-path>","expected_text":"Requirement already satisfied: pyg-base"},{"kind":"example","claim":"zipper scalar broadcasting example","source":"src/pyg_base/_zip.py / zipper docstring","input":"zipper([1,2,3], 4)","expected":"[(1, 4), (2, 4), (3, 4)]","argv":["<guest-path>","-m","pytest","tests/test_zip.py","-q"],"cwd":"<guest-path>","expected_text":"2 passed"}]
EOF

<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
 <guest-path> -m pip install pytest
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay