I maintain standup-bot, a small CLI that drafts your daily standup from git log with a local LLM. I audited it before tagging 0.2.7. It took five pull requests.
First finding: a CVE in cryptography 49, the library that encrypts the app's own config. One-line fix.
The suite passed at 86% total. Per module, main.py sat at 44% behind a 951-line entry point. A SQLite helper leaked connections: around 180 warnings on Python 3.14, silent on 3.12. I fixed it anyway. Then CI across 3 OS paid for itself on day one. Fifteen jobs, two red: Windows 3.10 and 3.11. My own test set global os.name to force a Unix branch. On older Windows Pythons that breaks path construction process-wide and kills pytest. One-line fix with a scoped stub. I wrote 37 handler tests: main.py 44 to 72, total 92.
Shipped: 0.2.7 on PyPI.
Repo: standup-bot on GitHub
Top comments (0)