simonw/sqlite-utils

No problems traced to this repository code in these checks.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• sqlite-utils memory runs SQL over CSV piped on stdin: Real input produced the expected result: "name": "Cleo"

  Source: `sqlite-utils memory` lets you import CSV or JSON data into an in-memory database and run SQL queries against it in a single command:

  Input: CSV via stdin, select name and age

  Expected: rows with name Cleo

  Command: <guest-path> memory - 'select name, age from stdin'

  Observed: "name": "Cleo", "age": 4}, {"name": "Pancakes", "age": 2}]

• sqlite-utils memory runs SQL over JSON piped on stdin: Real input produced the expected result: "name": "Pancakes"

  Source: `sqlite-utils memory` lets you import CSV or JSON data into an in-memory database and run SQL queries against it in a single command:

  Input: JSON array via stdin, select name

  Expected: rows with name Pancakes

  Command: <guest-path> memory - 'select name from stdin'

  Observed: "name": "Pancakes"}]

Examples

• Insert a CSV file into a new SQLite database file: command completed successfully with no output

  Source: README.md: sqlite-utils insert dogs.db dogs dogs.csv --csv

  Input: <guest-path> into fresh <guest-path>

  Expected: exit 0 and new database file created

  Command: <guest-path> insert <guest-path> dogs <guest-path> --csv

• Repository documented test suite (CI runs pytest): command completed successfully

  Source: .github/workflows/test.yml: pytest -v

  Input: offline test suite in venv

  Expected: all tests pass

  Command: <guest-path> -q -p no:cacheprovider

  Observed: TemporaryDirectory' or pytest's 'tmp_path' fixture with absolute paths instead. with runner.isolated_filesystem(): tests/test_insert_files.py::test_insert_files_bad_text_encoding_error <guest-path> DeprecationWarning: 'isolated_filesystem' is deprecated and will be removed in Click 9.0. Use 'tempfile.TemporaryDirectory' or pytest's 'tmp_path' fixture with absolute paths instead. with runner.isolated_filesystem(): -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html 1497 passed, 16 skipped, 33 warnings in 87.76s (0:01:27)

Local or hosted: local

Run sqlite-utils (CLI) on CSV and JSON piped via stdin using the README's `sqlite-utils memory` command, plus insert a CSV into a new SQLite file and run the offline pytest suite

cd <guest-path> && pwd && ls -la && git -C . rev-parse HEAD 2>&1 | head -1; python3 --version; id -u; cat /etc/os-release | head -2; echo "CDP=$CDP_URL"
cd <guest-path> && cat README.md 2>/dev/null | head -150; ls <guest-path>; ls /inputs 2>&1
cd <guest-path> && grep -n "requires-python\|dependencies" -A3 pyproject.toml | head -30; cat Justfile; ls .coldpass; python3 -m venv --help >/dev/null 2>&1 && echo venv_ok || echo venv_missing
mkdir -p <guest-path> && cd <guest-path> && python3 -m venv <guest-path> && <guest-path> install -q --upgrade pip 2>&1 | tail -3; <guest-path> install -q <guest-path> 2>&1 | tail -5; echo rc=$?; ls <guest-path> | grep sqlite
mkdir -p <guest-path> && printf 'id,age,name\n1,4,Cleo\n2,2,Pancakes\n' > <guest-path> && cd <guest-path> && export PATH=<guest-path> && sqlite-utils --version && sqlite-utils memory dogs.csv "select * from t"; echo rc=$?; sqlite-utils memory dogs.csv "select * from t" --csv; echo rc=$?
export PATH=<guest-path>; cd <guest-path> && cat dogs.csv | sqlite-utils memory - "select name, age from stdin"; echo rc=$?; mkdir -p <guest-path> && sqlite-utils insert <guest-path> dogs dogs.csv --csv; echo rc=$?; ls -la <guest-path>; sqlite-utils <guest-path> "select id, name from dogs"; echo rc=$?
cd <guest-path> && sed -n '/optional-dependencies/,/^$/p;/dependency-groups/,/^\[tool/p' pyproject.toml | head -50; ls .github/workflows; grep -n "pytest\|run:" .github/workflows/test.yml | head -20
<guest-path> install -q pytest hypothesis numpy 2>&1 | tail -3; cd <guest-path> && timeout 900 <guest-path> -q -p no:cacheprovider 2>&1 | tail -15; echo rc=${PIPESTATUS[0]}
export PATH=<guest-path>; cd <guest-path> && echo '[{"id": 1, "name": "Cleo"}, {"id": 2, "name": "Pancakes"}]' | sqlite-utils memory - "select name from stdin"; echo rc=$?; sqlite-utils memory --help | grep -i -A1 "save\|--table\|--csv" | head -12
rm -rf <guest-path> && cd <guest-path> && ls -a && git status 2>/dev/null | head -1; find . -maxdepth 2 -name "*.egg-info" -o -maxdepth 2 -name build -type d | head; mkdir -p <guest-path> && ls -la <guest-path>
cd <guest-path> && rm -rf build sqlite_utils.egg-info .hypothesis && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["sqlite-utils","memory","-","select name, age from stdin"],"cwd":"<guest-path>","stdin":"id,age,name\n1,4,Cleo\n2,2,Pancakes\n","env":{},"expected_text":"\"name\": \"Cleo\""}
EOF
python3 -I -c "import json;print(json.load(open('.coldpass/probe.json'))['argv'])"
cd <guest-path> && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","memory","-","select name, age from stdin"],"cwd":"<guest-path>","stdin":"id,age,name\n1,4,Cleo\n2,2,Pancakes\n","env":{},"expected_text":"\"name\": \"Cleo\""}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"sqlite-utils memory runs SQL over CSV piped on stdin","source":"`sqlite-utils memory` lets you import CSV or JSON data into an in-memory database and run SQL queries against it in a single command:","input":"CSV via stdin, select name and age","expected":"rows with name Cleo","probe_kind":"cli","argv":["<guest-path>","memory","-","select name, age from stdin"],"stdin":"id,age,name\n1,4,Cleo\n2,2,Pancakes\n","expected_text":"\"name\": \"Cleo\"","cwd":"<guest-path>","env":{}},
{"kind":"claim","claim":"sqlite-utils memory runs SQL over JSON piped on stdin","source":"`sqlite-utils memory` lets you import CSV or JSON data into an in-memory database and run SQL queries against it in a single command:","input":"JSON array via stdin, select name","expected":"rows with name Pancakes","probe_kind":"cli","argv":["<guest-path>","memory","-","select name from stdin"],"stdin":"[{\"id\": 1, \"name\": \"Cleo\"}, {\"id\": 2, \"name\": \"Pancakes\"}]","expected_text":"\"name\": \"Pancakes\"","cwd":"<guest-path>","env":{}}]
EOF
python3 -I -c "import json;[print(c['argv'][-1]) for c in json.load(open('.coldpass/claims.json'))]"
cd <guest-path> && cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Insert a CSV file into a new SQLite database file","source":"README.md: sqlite-utils insert dogs.db dogs dogs.csv --csv","input":"<guest-path> into fresh <guest-path>","expected":"exit 0 and new database file created","argv":["<guest-path>","insert","<guest-path>","dogs","<guest-path>","--csv"],"cwd":"<guest-path>","env":{},"output_directory":"<guest-path>"},
{"kind":"example","claim":"Repository documented test suite (CI runs pytest)","source":".github/workflows/test.yml: pytest -v","input":"offline test suite in venv","expected":"all tests pass","argv":["<guest-path>","-q","-p","no:cacheprovider"],"cwd":"<guest-path>","env":{"HYPOTHESIS_STORAGE_DIRECTORY":"<guest-path>"},"expected_text":"1497 passed, 16 skipped"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Entry points inspected: README.md (CLI/library usage only), pyproject.toml [project.scripts] sqlite-utils = sqlite_utils.cli:cli, Justfile. No cron, scheduler, loop, webhook, --once or --now feature in the product; the only scheduling found is in CI workflows (.github/workflows), which are not product cycles.","checks":[]}
EOF
<guest-path> -I -c "import json;[json.load(open('.coldpass/'+f)) for f in ['examples.json','cycles.json','claims.json','probe.json']];print('json ok')"
cd <guest-path> && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Run sqlite-utils (CLI) on CSV and JSON piped via stdin using the README's `sqlite-utils memory` command, plus insert a CSV into a new SQLite file and run the offline pytest suite","operation_scope":"Ubuntu 24.04 guest, Python 3.12.3, venv at <guest-path>, pip install of the local workspace source (sqlite-utils 4.2.1). Offline. No browser, no credentials.","steps":["python3 -m venv <guest-path>","<guest-path> install <guest-path>","sqlite-utils memory dogs.csv \"select * from t\"","cat dogs.csv | sqlite-utils memory - \"select name, age from stdin\"","echo JSON | sqlite-utils memory - \"select name from stdin\"","sqlite-utils insert dogs.db dogs dogs.csv --csv","sqlite-utils dogs.db \"select id, name from dogs\"","pip install pytest hypothesis numpy; pytest -q (CI test.yml runs pytest)"],"deviations":["Used pip in a venv (README's pip install) instead of the Justfile's uv; uv not needed for the README path.","Workspace has no .git metadata, so the pinned commit 9c66bafa52ae23d40499c74b0db3b635bcddb876 was not verified; git init/fetch steps were not needed for these commands.","pip install and pytest created build/, sqlite_utils.egg-info and .hypothesis in the checkout; removed build/, egg-info and .hypothesis after install. pytest later run with HYPOTHESIS_STORAGE_DIRECTORY outside the checkout.","Pytest installed extra test deps (pytest, hypothesis, numpy) per CI workflow; not the full dev dependency group (no lint run).","Library (Python API) example in README not run: it is inline Python, not a documented CLI entrypoint.","Browser/CDP endpoint not used: operation is offline CLI."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -60