I saw your twitter comment and decided to run some analysis tools in response. N.B. You can turn checkers these on for PRs by installing the app (disclaimer: my company's app).
The results are here. They are from semgrep and bandit - both of which are open source python analysis tools. I'm not sure why Facebook's Python type checker (pyre) didn't work but if that's something you'd like then we can definitely work through it.
I saw your twitter comment and decided to run some analysis tools in response. N.B. You can turn checkers these on for PRs by installing the app (disclaimer: my company's app).
The results are here. They are from semgrep and bandit - both of which are open source python analysis tools. I'm not sure why Facebook's Python type checker (pyre) didn't work but if that's something you'd like then we can definitely work through it.