@vercel/python - npm Package Compare versions

Comparing version 6.15.1 to 6.16.0

vc_init_dev.py

+# Auto-generated template used by vercel dev (Python, ASGI/WSGI)
+# Serves static files from PUBLIC_DIR before delegating to the user app.
+
+import sys
+import os
+import inspect
+from os import path as _p
+from importlib import import_module
+import mimetypes
+
+
+# Simple ANSI coloring. Respect NO_COLOR environment variable.
+_NO_COLOR = "NO_COLOR" in os.environ
+_RESET = "\x1b[0m"
+_YELLOW = "\x1b[33m"
+_GREEN = "\x1b[32m"
+_RED = "\x1b[31m"
+
+
+def _color(text: str, code: str) -> str:
+    if _NO_COLOR:
+        return text
+    return f"{code}{text}{_RESET}"
+
+
+def _normalize_service_route_prefix(raw_prefix):
+    if not raw_prefix:
+        return ""
+
+    prefix = raw_prefix.strip()
+    if not prefix:
+        return ""
+
+    if not prefix.startswith("/"):
+        prefix = f"/{prefix}"
+
+    return "" if prefix == "/" else prefix.rstrip("/")
+
+
+def _is_service_route_prefix_strip_enabled():
+    raw = os.environ.get("VERCEL_SERVICE_ROUTE_PREFIX_STRIP")
+    if not raw:
+        return False
+    return raw.lower() in ("1", "true")
+
+
+_SERVICE_ROUTE_PREFIX = (
+    _normalize_service_route_prefix(os.environ.get("VERCEL_SERVICE_ROUTE_PREFIX"))
+    if _is_service_route_prefix_strip_enabled()
+    else ""
+)
+
+
+def _strip_service_route_prefix(path_value):
+    if not path_value:
+        path_value = "/"
+    elif not path_value.startswith("/"):
+        path_value = f"/{path_value}"
+
+    prefix = _SERVICE_ROUTE_PREFIX
+    if not prefix:
+        return path_value, ""
+
+    if path_value == prefix:
+        return "/", prefix
+
+    if path_value.startswith(f"{prefix}/"):
+        stripped = path_value[len(prefix) :]
+        return stripped if stripped else "/", prefix
+
+    return path_value, ""
+
+
+# ASGI/WSGI app detection
+USER_MODULE = "__VC_DEV_MODULE_PATH__"
+_mod = import_module(USER_MODULE)
+_user_app_name = (
+    "app"
+    if hasattr(_mod, "app")
+    else "application"
+    if hasattr(_mod, "application")
+    else None
+)
+if _user_app_name is None:
+    raise RuntimeError(
+        f"Missing 'app' or 'application' in module '{USER_MODULE}'. "
+        f"Define `app = ...` or `application = ...` in your entrypoint."
+    )
+
+_user_app = getattr(_mod, _user_app_name, None)
+
+
+def _get_positional_param_count(obj):
+    try:
+        sig = inspect.signature(obj)
+        return sum(
+            1
+            for p in sig.parameters.values()
+            if p.default is inspect.Parameter.empty
+            and p.kind
+            in (
+                inspect.Parameter.POSITIONAL_ONLY,
+                inspect.Parameter.POSITIONAL_OR_KEYWORD,
+            )
+        )
+    except (ValueError, TypeError):
+        return None
+
+
+def _detect_app_type(app_obj):
+    # try .asgi attribute if it's available and is callable
+    asgi_attr = getattr(app_obj, "asgi", None)
+    if asgi_attr is not None and callable(asgi_attr):
+        return "asgi", asgi_attr
+
+    # For async detection, check the object itself first (works for plain
+    # functions/methods).
+    # For class instances iscoroutinefunction(obj) is False,
+    # so fall back to __call__.
+    is_async = inspect.iscoroutinefunction(app_obj)
+    if not is_async:
+        call_method = getattr(app_obj, "__call__", None)
+        if call_method is not None:
+            is_async = inspect.iscoroutinefunction(call_method)
+
+    # inspect.signature() already delegates to __call__ for class instances,
+    # and works directly on plain functions, so always inspect app_obj.
+    param_count = _get_positional_param_count(app_obj)
+
+    # ASGI (scope, receive, send)
+    if is_async and param_count == 3:
+        return "asgi", app_obj
+
+    # WSGI (environ, start_response)
+    if param_count == 2:
+        return "wsgi", app_obj
+
+    print(
+        _color(
+            f"Could not determine the application interface for '{USER_MODULE}:{_user_app_name}'\n"
+            f"Expected either:\n"
+            f"  - An ASGI app: async callable(scope, receive, send)\n"
+            f"  - A WSGI app: callable(environ, start_response)",
+            _RED,
+        ),
+        file=sys.stderr,
+    )
+    sys.exit(1)
+
+
+app_type, resolved_app = _detect_app_type(_user_app)
+
+if app_type == "asgi":
+    _asgi_app = resolved_app
+    _wsgi_app = None
+else:
+    _wsgi_app = resolved_app
+    _asgi_app = None
+
+PUBLIC_DIR = "public"
+
+# Prepare ASGI app
+
+# Optional StaticFiles import; tolerate missing deps
+StaticFiles = None
+try:
+    from fastapi.staticfiles import StaticFiles as _SF  # type: ignore
+
+    StaticFiles = _SF
+except Exception:
+    try:
+        from starlette.staticfiles import StaticFiles as _SF  # type: ignore
+
+        StaticFiles = _SF
+    except Exception:
+        StaticFiles = None
+
+# Prepare static files app (if starlette/fastapi installed)
+_static_app = None
+if StaticFiles is not None:
+    try:
+        try:
+            _static_app = StaticFiles(directory=PUBLIC_DIR, check_dir=False)
+        except TypeError:
+            _static_app = StaticFiles(directory=PUBLIC_DIR)
+    except Exception:
+        _static_app = None
+
+
+def _apply_service_route_prefix_to_scope(scope):
+    path_value, matched_prefix = _strip_service_route_prefix(scope.get("path", "/"))
+    if not matched_prefix:
+        return scope
+
+    updated_scope = dict(scope)
+    updated_scope["path"] = path_value
+
+    raw_path = scope.get("raw_path")
+    if isinstance(raw_path, (bytes, bytearray)):
+        try:
+            decoded = bytes(raw_path).decode("utf-8", "surrogateescape")
+            stripped_raw, _ = _strip_service_route_prefix(decoded)
+            updated_scope["raw_path"] = stripped_raw.encode("utf-8", "surrogateescape")
+        except Exception:
+            pass
+
+    existing_root = scope.get("root_path", "") or ""
+    if existing_root and existing_root != "/":
+        existing_root = existing_root.rstrip("/")
+    else:
+        existing_root = ""
+    updated_scope["root_path"] = f"{existing_root}{matched_prefix}"
+    return updated_scope
+
+
+async def asgi_app(scope, receive, send):
+    effective_scope = _apply_service_route_prefix_to_scope(scope)
+
+    if _static_app is not None and effective_scope.get("type") == "http":
+        req_path = effective_scope.get("path", "/") or "/"
+        safe = _p.normpath(req_path).lstrip("/")
+        full = _p.join(PUBLIC_DIR, safe)
+        try:
+            base = _p.realpath(PUBLIC_DIR)
+            target = _p.realpath(full)
+            if (target == base or target.startswith(base + _p.sep)) and _p.isfile(
+                target
+            ):
+                await _static_app(effective_scope, receive, send)
+                return
+        except Exception:
+            pass
+    await _asgi_app(effective_scope, receive, send)
+
+
+# Prepare WSGI
+
+
+def _is_safe_file(base_dir: str, target: str) -> bool:
+    try:
+        base = _p.realpath(base_dir)
+        tgt = _p.realpath(target)
+        return (tgt == base or tgt.startswith(base + os.sep)) and _p.isfile(tgt)
+    except Exception:
+        return False
+
+
+def _static_wsgi_app(environ, start_response):
+    # Only handle GET/HEAD requests for static assets
+    if environ.get("REQUEST_METHOD", "GET") not in ("GET", "HEAD"):
+        return _not_found(start_response)
+
+    req_path = environ.get("PATH_INFO", "/") or "/"
+    safe = _p.normpath(req_path).lstrip("/")
+    full = _p.join(PUBLIC_DIR, safe)
+    if not _is_safe_file(PUBLIC_DIR, full):
+        return _not_found(start_response)
+
+    ctype, _ = mimetypes.guess_type(full)
+    headers = [("Content-Type", ctype or "application/octet-stream")]
+    try:
+        # For HEAD requests, send headers only
+        if environ.get("REQUEST_METHOD") == "HEAD":
+            start_response("200 OK", headers)
+            return []
+        with open(full, "rb") as f:
+            data = f.read()
+        headers.append(("Content-Length", str(len(data))))
+        start_response("200 OK", headers)
+        return [data]
+    except Exception:
+        return _not_found(start_response)
+
+
+def _not_found(start_response):
+    start_response("404 Not Found", [("Content-Type", "text/plain; charset=utf-8")])
+    return [b"Not Found"]
+
+
+def wsgi_app(environ, start_response):
+    path_info, matched_prefix = _strip_service_route_prefix(
+        environ.get("PATH_INFO", "/") or "/"
+    )
+    environ["PATH_INFO"] = path_info
+    if matched_prefix:
+        script_name = environ.get("SCRIPT_NAME", "") or ""
+        if script_name and script_name != "/":
+            script_name = script_name.rstrip("/")
+        else:
+            script_name = ""
+        environ["SCRIPT_NAME"] = f"{script_name}{matched_prefix}"
+
+    # Try static first; if 404 then delegate to user app
+    captured_status = ""
+    captured_headers = tuple()
+    body_chunks = []
+
+    def capture_start_response(status, headers, exc_info=None):
+        nonlocal captured_status, captured_headers
+        captured_status = status
+        captured_headers = tuple(headers)
+
+        # Return a writer that buffers the body
+        def write(chunk: bytes):
+            body_chunks.append(chunk)
+
+        return write
+
+    result = _static_wsgi_app(environ, capture_start_response)
+    # If static handler produced 200, forward its response
+    if captured_status.startswith("200 "):
+        # Send headers and any chunks collected
+        writer = start_response(captured_status, list(captured_headers))
+        for chunk in body_chunks:
+            writer(chunk)
+        return result
+
+    # Otherwise, delegate to user's WSGI app
+    return _wsgi_app(environ, start_response)
+
+
+# Run dev server
+
+if __name__ == "__main__":
+    # Development runner
+    #
+    # For WSGI: prefer Werkzeug, but fall back to stdlib wsgiref.
+    # For ASGI: prefer FastAPI CLI (dev command), then uvicorn, then hypercorn.
+    #
+    # The port is provided by the caller via the PORT environment variable.
+
+    host = "127.0.0.1"
+    _raw_port = os.environ.get("PORT")
+    if not _raw_port:
+        print(
+            _color("PORT environment variable is required.", _RED),
+            file=sys.stderr,
+        )
+        sys.exit(1)
+    port = int(_raw_port)
+
+    if app_type == "wsgi":
+        try:
+            from werkzeug.serving import run_simple  # type: ignore
+
+            run_simple(host, port, wsgi_app, use_reloader=True)
+        except Exception:
+            print(
+                _color(
+                    "Werkzeug not installed; falling back to wsgiref (no reloader).",
+                    _YELLOW,
+                ),
+                file=sys.stderr,
+            )
+            from wsgiref.simple_server import make_server
+
+            httpd = make_server(host, port, wsgi_app)
+            print(_color(f"Serving on http://{host}:{port}", _GREEN))
+            httpd.serve_forever()
+    else:
+        try:
+            from fastapi_cli.cli import dev as fastapi_dev  # type: ignore
+        except ImportError:
+            fastapi_dev = None
+
+        if fastapi_dev is not None:
+            fastapi_dev(
+                entrypoint="vc_init_dev:asgi_app", host=host, port=port, reload=True
+            )
+            sys.exit(0)
+
+        try:
+            import uvicorn  # type: ignore
+
+            uvicorn.run(
+                "vc_init_dev:asgi_app",
+                host=host,
+                port=port,
+                use_colors=True,
+                reload=True,
+            )
+        except Exception:
+            try:
+                import asyncio
+                from hypercorn.config import Config  # type: ignore
+                from hypercorn.asyncio import serve  # type: ignore
+
+                config = Config()
+                config.bind = [f"{host}:{port}"]
+
+                async def _run():
+                    await serve(asgi_app, config)
+
+                asyncio.run(_run())
+            except Exception:
+                print(
+                    _color(
+                        'No ASGI server found. Please install either "uvicorn" or "hypercorn" (e.g. "pip install uvicorn").',
+                        _RED,
+                    ),
+                    file=sys.stderr,
+                )
+                sys.exit(1)

package.json

 {
   "name": "@vercel/python",
-  "version": "6.15.1",
+  "version": "6.16.0",
   "main": "./dist/index.js",
@@ -10,4 +10,3 @@ "license": "Apache-2.0",
     "vc_init.py",
-    "vc_init_dev_asgi.py",
-    "vc_init_dev_wsgi.py"
+    "vc_init_dev.py"
   ],
@@ -20,3 +19,3 @@ "repository": {
   "dependencies": {
-    "@vercel/python-analysis": "0.6.0"
+    "@vercel/python-analysis": "0.7.0"
   },
@@ -39,5 +38,7 @@ "devDependencies": {
     "which": "3.0.0",
-    "@vercel/build-utils": "13.4.3",
-    "@vercel/error-utils": "2.0.3",
-    "@vercel/python-runtime": "0.5.1"
+    "get-port": "5.1.1",
+    "is-port-reachable": "3.1.0",
+    "@vercel/build-utils": "13.5.0",
+    "@vercel/python-runtime": "0.5.1",
+    "@vercel/error-utils": "2.0.3"
   },
@@ -44,0 +45,0 @@ "scripts": {

vc_init_dev_asgi.py

-# Auto-generated template used by vercel dev (Python, ASGI)
-# Serves static files from PUBLIC_DIR before delegating to the user ASGI app.
-import sys
-import os
-from os import path as _p
-from importlib import import_module
-
-
-# Simple ANSI coloring. Respect NO_COLOR environment variable.
-_NO_COLOR = 'NO_COLOR' in os.environ
-_RESET = "\x1b[0m"
-_YELLOW = "\x1b[33m"
-_GREEN = "\x1b[32m"
-_RED = "\x1b[31m"
-
-def _color(text: str, code: str) -> str:
-    if _NO_COLOR:
-        return text
-    return f"{code}{text}{_RESET}"
-
-
-# Optional StaticFiles import; tolerate missing deps
-StaticFiles = None
-try:
-    from fastapi.staticfiles import StaticFiles as _SF
-    StaticFiles = _SF
-except Exception:
-    try:
-        from starlette.staticfiles import StaticFiles as _SF
-        StaticFiles = _SF
-    except Exception:
-        StaticFiles = None
-
-USER_MODULE = "__VC_DEV_MODULE_PATH__"
-_mod = import_module(USER_MODULE)
-_app = getattr(_mod, 'app', None)
-if _app is None:
-    raise RuntimeError(
-        f"Missing 'app' in module '{USER_MODULE}'. Define `app = ...` (ASGI app)."
-    )
-
-# Prefer a callable app.asgi when available; some frameworks expose a boolean here
-_CAND = getattr(_app, 'asgi', None)
-USER_ASGI_APP = _CAND if callable(_CAND) else _app
-
-PUBLIC_DIR = 'public'
-
-
-def _normalize_service_route_prefix(raw_prefix):
-    if not raw_prefix:
-        return ''
-
-    prefix = raw_prefix.strip()
-    if not prefix:
-        return ''
-
-    if not prefix.startswith('/'):
-        prefix = f'/{prefix}'
-
-    return '' if prefix == '/' else prefix.rstrip('/')
-
-
-def _is_service_route_prefix_strip_enabled():
-    raw = os.environ.get('VERCEL_SERVICE_ROUTE_PREFIX_STRIP')
-    if not raw:
-        return False
-    return raw.lower() in ('1', 'true')
-
-
-_SERVICE_ROUTE_PREFIX = (
-    _normalize_service_route_prefix(os.environ.get('VERCEL_SERVICE_ROUTE_PREFIX'))
-    if _is_service_route_prefix_strip_enabled()
-    else ''
-)
-
-
-def _strip_service_route_prefix(path_value):
-    if not path_value:
-        path_value = '/'
-    elif not path_value.startswith('/'):
-        path_value = f'/{path_value}'
-
-    prefix = _SERVICE_ROUTE_PREFIX
-    if not prefix:
-        return path_value, ''
-
-    if path_value == prefix:
-        return '/', prefix
-
-    if path_value.startswith(f'{prefix}/'):
-        stripped = path_value[len(prefix):]
-        return stripped if stripped else '/', prefix
-
-    return path_value, ''
-
-
-def _apply_service_route_prefix_to_scope(scope):
-    path_value, matched_prefix = _strip_service_route_prefix(scope.get('path', '/'))
-    if not matched_prefix:
-        return scope
-
-    updated_scope = dict(scope)
-    updated_scope['path'] = path_value
-
-    raw_path = scope.get('raw_path')
-    if isinstance(raw_path, (bytes, bytearray)):
-        try:
-            decoded = bytes(raw_path).decode('utf-8', 'surrogateescape')
-            stripped_raw, _ = _strip_service_route_prefix(decoded)
-            updated_scope['raw_path'] = stripped_raw.encode(
-                'utf-8', 'surrogateescape'
-            )
-        except Exception:
-            pass
-
-    existing_root = scope.get('root_path', '') or ''
-    if existing_root and existing_root != '/':
-        existing_root = existing_root.rstrip('/')
-    else:
-        existing_root = ''
-    updated_scope['root_path'] = f'{existing_root}{matched_prefix}'
-    return updated_scope
-
-# Prepare static files app (if starlette/fastapi installed)
-static_app = None
-if StaticFiles is not None:
-    try:
-        try:
-            static_app = StaticFiles(directory=PUBLIC_DIR, check_dir=False)
-        except TypeError:
-            # Older Starlette without check_dir parameter
-            static_app = StaticFiles(directory=PUBLIC_DIR)
-    except Exception:
-        static_app = None
-
-
-async def app(scope, receive, send):
-    effective_scope = _apply_service_route_prefix_to_scope(scope)
-
-    if static_app is not None and effective_scope.get('type') == 'http':
-        req_path = effective_scope.get('path', '/') or '/'
-        safe = _p.normpath(req_path).lstrip('/')
-        full = _p.join(PUBLIC_DIR, safe)
-        try:
-            base = _p.realpath(PUBLIC_DIR)
-            target = _p.realpath(full)
-            if (target == base or target.startswith(base + _p.sep)) and _p.isfile(target):
-                await static_app(effective_scope, receive, send)
-                return
-        except Exception:
-            pass
-    await USER_ASGI_APP(effective_scope, receive, send)
-
-
-if __name__ == '__main__':
-    # Development runner for ASGI: prefer fastapi dev, then uvicorn, then hypercorn.
-    # Bind to localhost on an ephemeral port and emit a recognizable log line
-    # so the caller can detect the bound port.
-    host = '127.0.0.1'
-
-    try:
-        from fastapi_cli.cli import dev
-    except ImportError:
-        dev = None
-
-    if dev is not None:
-        dev(entrypoint='vc_init_dev_asgi:app', host=host, port=0, reload=True)
-        sys.exit(0)
-
-    try:
-        import uvicorn
-        uvicorn.run('vc_init_dev_asgi:app', host=host, port=0, use_colors=True, reload=True)
-    except Exception:
-        try:
-            import asyncio
-            from hypercorn.config import Config
-            from hypercorn.asyncio import serve
-
-            config = Config()
-            config.bind = [f'{host}:0']
-
-            async def _run():
-                await serve(app, config)
-
-            asyncio.run(_run())
-        except Exception:
-            print(_color('No ASGI server found. Please install either "uvicorn" or "hypercorn" (e.g. "pip install uvicorn").', _RED), file=sys.stderr)
-            sys.exit(1)

vc_init_dev_wsgi.py

-"""
-Auto-generated template used by vercel dev (Python, WSGI)
-Serves static files from PUBLIC_DIR before delegating to the user WSGI app.
-
-This file is written to the project at .vercel/python/vc_init_dev_wsgi.py
-and imported by the dev server launcher.
-"""
-from importlib import import_module
-from os import path as _p
-import os
-import mimetypes
-
-# Simple ANSI coloring. Respect NO_COLOR environment variable.
-_NO_COLOR = 'NO_COLOR' in os.environ
-_RESET = "\x1b[0m"
-_YELLOW = "\x1b[33m"
-_GREEN = "\x1b[32m"
-
-def _color(text: str, code: str) -> str:
-    if _NO_COLOR:
-        return text
-    return f"{code}{text}{_RESET}"
-
-USER_MODULE = "__VC_DEV_MODULE_PATH__"
-PUBLIC_DIR = "public"
-
-
-def _normalize_service_route_prefix(raw_prefix):
-    if not raw_prefix:
-        return ''
-
-    prefix = raw_prefix.strip()
-    if not prefix:
-        return ''
-
-    if not prefix.startswith('/'):
-        prefix = f'/{prefix}'
-
-    return '' if prefix == '/' else prefix.rstrip('/')
-
-
-def _is_service_route_prefix_strip_enabled():
-    raw = os.environ.get('VERCEL_SERVICE_ROUTE_PREFIX_STRIP')
-    if not raw:
-        return False
-    return raw.lower() in ('1', 'true')
-
-
-_SERVICE_ROUTE_PREFIX = (
-    _normalize_service_route_prefix(os.environ.get('VERCEL_SERVICE_ROUTE_PREFIX'))
-    if _is_service_route_prefix_strip_enabled()
-    else ''
-)
-
-
-def _strip_service_route_prefix(path_info):
-    if not path_info:
-        path_info = '/'
-    elif not path_info.startswith('/'):
-        path_info = f'/{path_info}'
-
-    prefix = _SERVICE_ROUTE_PREFIX
-    if not prefix:
-        return path_info, ''
-
-    if path_info == prefix:
-        return '/', prefix
-
-    if path_info.startswith(f'{prefix}/'):
-        stripped = path_info[len(prefix):]
-        return stripped if stripped else '/', prefix
-
-    return path_info, ''
-
-_mod = import_module(USER_MODULE)
-_app = getattr(_mod, "app", None)
-if _app is None:
-    raise RuntimeError(
-        f"Missing 'app' in module '{USER_MODULE}'. Define `app = ...` (WSGI app)."
-    )
-
-
-def _is_safe_file(base_dir: str, target: str) -> bool:
-    try:
-        base = _p.realpath(base_dir)
-        tgt = _p.realpath(target)
-        return (tgt == base or tgt.startswith(base + os.sep)) and _p.isfile(tgt)
-    except Exception:
-        return False
-
-
-def _static_wsgi_app(environ, start_response):
-    # Only handle GET/HEAD requests for static assets
-    if environ.get("REQUEST_METHOD", "GET") not in ("GET", "HEAD"):
-        return _not_found(start_response)
-
-    req_path = environ.get("PATH_INFO", "/") or "/"
-    safe = _p.normpath(req_path).lstrip("/")
-    full = _p.join(PUBLIC_DIR, safe)
-    if not _is_safe_file(PUBLIC_DIR, full):
-        return _not_found(start_response)
-
-    ctype, encoding = mimetypes.guess_type(full)
-    headers = [("Content-Type", ctype or "application/octet-stream")]
-    try:
-        # For HEAD requests, send headers only
-        if environ.get("REQUEST_METHOD") == "HEAD":
-            start_response("200 OK", headers)
-            return []
-        with open(full, "rb") as f:
-            data = f.read()
-        headers.append(("Content-Length", str(len(data))))
-        start_response("200 OK", headers)
-        return [data]
-    except Exception:
-        return _not_found(start_response)
-
-
-def _not_found(start_response):
-    start_response("404 Not Found", [("Content-Type", "text/plain; charset=utf-8")])
-    return [b"Not Found"]
-
-
-def _combined_app(environ, start_response):
-    path_info, matched_prefix = _strip_service_route_prefix(
-        environ.get("PATH_INFO", "/") or "/"
-    )
-    environ["PATH_INFO"] = path_info
-    if matched_prefix:
-        script_name = environ.get("SCRIPT_NAME", "") or ""
-        if script_name and script_name != "/":
-            script_name = script_name.rstrip("/")
-        else:
-            script_name = ""
-        environ["SCRIPT_NAME"] = f"{script_name}{matched_prefix}"
-
-    # Try static first; if 404 then delegate to user app
-    captured_status = ""
-    captured_headers = tuple()
-    body_chunks = []
-
-    def capture_start_response(status, headers, exc_info=None):  # type: ignore[no-redef]
-        nonlocal captured_status, captured_headers
-        captured_status = status
-        captured_headers = tuple(headers)
-        # Return a writer that buffers the body
-        def write(chunk: bytes):
-            body_chunks.append(chunk)
-        return write
-
-    result = _static_wsgi_app(environ, capture_start_response)
-    # If static handler produced 200, forward its response
-    if captured_status.startswith("200 "):
-        # Send headers and any chunks collected
-        writer = start_response(captured_status, list(captured_headers))
-        for chunk in body_chunks:
-            writer(chunk)
-        return result
-
-    # Otherwise, delegate to user's WSGI app
-    return _app(environ, start_response)
-
-
-# Public WSGI application consumed by the dev runner
-app = _combined_app
-
-
-if __name__ == "__main__":
-    # Development runner: prefer Werkzeug, fall back to stdlib wsgiref.
-    # Bind to localhost on an ephemeral port and emit a recognizable log line
-    # so the caller can detect the bound port.
-    host = "127.0.0.1"
-    try:
-        from werkzeug.serving import run_simple
-        run_simple(host, 0, app, use_reloader=True)
-    except Exception:
-        import sys
-        print(_color("Werkzeug not installed; falling back to wsgiref (no reloader).", _YELLOW), file=sys.stderr)
-        from wsgiref.simple_server import make_server
-        httpd = make_server(host, 0, app)
-        port = httpd.server_port
-        print(_color(f"Serving on http://{host}:{port}", _GREEN))
-        httpd.serve_forever()

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

372524

0.06%

Lines of code

10687

0.79%

Worsened metrics

Dev dependency count

20

11.11%

Number of package files

5

-16.67%

Number of medium supply chain risk alerts

12

50%

Dependency changes

• + Added

  @vercel/python-analysis@0.7.0
  (transitive)

• - Removed

  @vercel/python-analysis@0.6.0
  (transitive)

• Updated

  @vercel/python-analysis@0.7.0