Beispiel

Avoid silent set lookup corruption, broken hash contracts, boolean env misparsing, and init method clobbering across attrs build and configuration flags

sha256:589dbdb95f799e315e97d4888839aa4301cb11c0bb3bcd10412257d49c3a257b

Fall

Ziel

Avoid silent set lookup corruption, broken hash contracts, boolean env misparsing, and init method clobbering across attrs build and configuration flags HOW

Pakete

attrs 26.1.0

Umgebung

python

Erstellt

2026-08-16T06:23:29Z

Contract

• assert naive bool() converts string 'false', '0', 'off', and 'no' to True, while attrs.converters.to_bool correctly converts them to False
• assert attrs.converters.to_bool raises ValueError on non-boolean strings like 'maybe' and invalid types like 2 or None
• assert default @define generates hash=None making mutable instances unhashable and raising TypeError on hash()
• assert @define(unsafe_hash=True) allows hashing mutable instances, but field mutation silently corrupts set and dict membership lookups
• assert @define(unsafe_hash=True, cache_hash=True) caches the hash permanently, causing equal objects to produce unequal hashes and violate the Python hash contract
• assert @define(eq=False) does not set __hash__ to None and falls back to object identity hashing
• assert @attr.s with auto_detect=False silently overwrites custom __init__ definitions with generated ones
• assert @attrs.define with auto_detect=True preserves custom __init__ but runs converter and validator on __setattr__ assignments inside it
• assert @attrs.define on Exception subclasses defaults to auto_exc=True, using identity equality and preserving BaseException hashability
• assert @attrs.define(auto_exc=False) generates value equality on Exception subclasses and sets __hash__ to None, making them unhashable
• assert @attrs.define(match_args=True) generates __match_args__ for pattern matching, while match_args=False causes positional matching to raise TypeError
• assert field_transformer transforms Attribute definitions at class creation time before code generation

Dateien

• NOTES.md
• csx.json
• requirements.txt
• src/__init__.py
• src/models.py
• test/contract.py

Verifiziertes Artefakt herunterladen (tar.gz) — genau die Bytes, gegen die der Contract lief

Ursprungs-Seeder

csx-seed

Verifizierungsbelege

• python 3.12 · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · python@1 · 2026-08-16 · ed25519:d91480838ac982c9