[bundle] Update 7 worlds (worlds-wheels-2026-06-09)#22
Merged
Karen Head of Multiworld QA / Isolated QA Checks
failed
Jun 10, 2026 in 4m 1s
Fuzz failed for 7 world(s)
World generation (fuzzer) results
am2r — ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
❌ fail | 7 issues(s), we should look it over. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 0.1MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
1 top-level network module imports, these are probably ok, but check them out. | |
ruff |
captured | 30 lint findings |
Findings
bandit
- /work/extracted/worlds/am2r/Client.py:372 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:38 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:41 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:57 [B323/MEDIUM] By default, Python will create a secure, verified ssl context for use in such classes as HTTPSConnection. However, it still allows using an insecure context via the _create_unverified_context that reverts to the previous behavior that does not validate certificates or perform hostname checks.
- /work/extracted/worlds/am2r/init.py:190 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:193 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:209 [B323/MEDIUM] By default, Python will create a secure, verified ssl context for use in such classes as HTTPSConnection. However, it still allows using an insecure context via the _create_unverified_context that reverts to the previous behavior that does not validate certificates or perform hostname checks.
net
- worlds/am2r/init.py: top-level
import urllib.requestat line 17
ruff
- /work/extracted/worlds/am2r/Client.py:9 F401
worlds.terrariaimported but unused - /work/extracted/worlds/am2r/Client.py:29 E711 Comparison to
Noneshould becond is not None - /work/extracted/worlds/am2r/Client.py:193 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:195 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:371 E401 Multiple imports on one line
- /work/extracted/worlds/am2r/Client.py:498 E722 Do not use bare
except - /work/extracted/worlds/am2r/Client.py:716 F841 Local variable
eis assigned to but never used - /work/extracted/worlds/am2r/Client.py:725 E712 Avoid equality comparisons to
True; usedata_decoded["Deathlinked"]:for truth checks - /work/extracted/worlds/am2r/Client.py:754 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:775 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:784 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:785 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:802 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:832 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:992 E722 Do not use bare
except - …and 10 more
dk64 — ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
❌ fail | 8 issues(s), we should look it over. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 34.0MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
1 top-level network module imports, these are probably ok, but check them out. | |
ruff |
captured | 6127 lint findings |
Findings
bandit
- /work/extracted/worlds/dk64/archipelago/client/common.py:171 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/dk64/archipelago/client/common.py:196 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/dk64/archipelago/client/common.py:263 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/dk64/randomizer/JsonReader.py:48 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/dk64/randomizer/JsonReader.py:58 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/dk64/randomizer/JsonReader.py:87 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/dk64/randomizer/Patching/ApplyRandomizer.py:766 [B306/MEDIUM] Use of insecure and deprecated function (mktemp).
- /work/extracted/worlds/dk64/randomizer/Patching/ApplyRandomizer.py:767 [B306/MEDIUM] Use of insecure and deprecated function (mktemp).
net
- worlds/dk64/archipelago/client/common.py: top-level
import urllib.requestat line 7
ruff
- /work/extracted/worlds/dk64/init.py:5 F401
mathimported but unused - /work/extracted/worlds/dk64/init.py:36 F841 Local variable
retis assigned to but never used - /work/extracted/worlds/dk64/init.py:102 F841 Local variable
eis assigned to but never used - /work/extracted/worlds/dk64/init.py:142 F401
entrance_rando.disconnect_entrance_for_randomizationimported but unused - /work/extracted/worlds/dk64/init.py:149 F401
archipelago.Goals.GOAL_MAPPINGimported but unused - /work/extracted/worlds/dk64/init.py:149 F401
archipelago.Goals.QUANTITY_GOALSimported but unused - /work/extracted/worlds/dk64/init.py:149 F401
archipelago.Goals.calculate_quantityimported but unused - /work/extracted/worlds/dk64/init.py:151 F401
archipelago.Options.Goalimported but unused - /work/extracted/worlds/dk64/init.py:151 F401
archipelago.Options.SwitchSanityimported but unused - /work/extracted/worlds/dk64/init.py:151 F401
archipelago.Options.SelectStartingKongimported but unused - /work/extracted/worlds/dk64/init.py:159 F401
randomizer.Settings.Settingsimported but unused - /work/extracted/worlds/dk64/init.py:163 F401
randomizer.Patching.EnemyRando.randomize_enemies_0imported but unused - /work/extracted/worlds/dk64/init.py:175 F811 Redefinition of unused
Enemiesfrom line 168:Enemiesredefined here - /work/extracted/worlds/dk64/init.py:177 F401
randomizer.Enums.Settings.Itemsimported but unused - /work/extracted/worlds/dk64/init.py:179 F811 Redefinition of unused
Kongsfrom line 169:Kongsredefined here - …and 10 more
huniepop — ⚠️ warn
| Check | Status | Notes |
|---|---|---|
fuzzer |
success=5 failure=5 timeout=0 ignored=0 rom=0 real=5 total=10 | |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 0.2MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 34 lint findings |
Findings
ruff
- /work/extracted/worlds/huniepop/CustomOption.py:82 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:88 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:94 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:100 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:114 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:120 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:125 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:130 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:137 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:174 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:180 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:186 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:192 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:197 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:202 E741 Ambiguous variable name:
l - …and 10 more
oot — ⚠️ warn
| Check | Status | Notes |
|---|---|---|
fuzzer |
success=9 failure=0 timeout=1 ignored=0 rom=0 real=0 total=10 | |
bandit |
❌ fail | 4 issues(s), we should look it over. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 8.3MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 377 lint findings |
Findings
bandit
- /work/extracted/worlds/oot/RuleParser.py:257 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/oot/RuleParser.py:269 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/oot/RuleParser.py:279 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/oot/RuleParser.py:410 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
ruff
- /work/extracted/worlds/oot/ASM/build.py:156 E731 Do not assign a
lambdaexpression, use adef - /work/extracted/worlds/oot/ASM/rom_diff.py:3 F401
jsonimported but unused - /work/extracted/worlds/oot/Adjuster.py:15 F401
.Options.DpadDungeonMenuimported but unused - /work/extracted/worlds/oot/Adjuster.py:15 F401
.Options.SpeedupMusicForLastTriforcePieceimported but unused - /work/extracted/worlds/oot/Adjuster.py:15 F401
.Options.SlowdownMusicWhenLowhpimported but unused - /work/extracted/worlds/oot/Adjuster.py:16 F401
.Options.UninvertYAxisInFirstPersonCameraimported but unused - /work/extracted/worlds/oot/Adjuster.py:16 F401
.Options.InputViewerimported but unused - /work/extracted/worlds/oot/Adjuster.py:16 F401
.Options.DisableBattleMusicimported but unused - /work/extracted/worlds/oot/Adjuster.py:16 F401
.Options.CreditsMusicimported but unused - /work/extracted/worlds/oot/Adjuster.py:119 F401
tkinter.Tkimported but unused - /work/extracted/worlds/oot/Audiobank.py:2 F401
io.FileIOimported but unused - /work/extracted/worlds/oot/Audiobank.py:5 F401
.Rom.Romimported but unused - /work/extracted/worlds/oot/Audiobank.py:129 E721 Use
isandis notfor type comparisons, orisinstance()for isinstance checks - /work/extracted/worlds/oot/Audiobank.py:138 E721 Use
isandis notfor type comparisons, orisinstance()for isinstance checks - /work/extracted/worlds/oot/Audiobank.py:142 E721 Use
isandis notfor type comparisons, orisinstance()for isinstance checks - …and 10 more
ori_wotw — ⚠️ warn
| Check | Status | Notes |
|---|---|---|
fuzzer |
success=7 failure=3 timeout=0 ignored=0 rom=0 real=3 total=10 | |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 2.8MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 7004 lint findings |
Findings
ruff
- /work/extracted/worlds/ori_wotw/Rules.py:9 F403
from .RulesFunctions import *used; unable to detect undefined names - /work/extracted/worlds/ori_wotw/Rules.py:50 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:55 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:61 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:63 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:64 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:67 F405
can_buy_mapmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:71 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:73 F405
can_open_doormay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:74 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:78 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:81 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:85 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:91 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:92 F405
has_enough_resourcesmay be undefined, or defined from star imports - …and 10 more
papermario — ❌ fail
| Check | Status | Notes |
|---|---|---|
fuzzer |
❌ fail | success=1 failure=9 timeout=0 ignored=0 rom=0 real=9 total=10 |
bandit |
❌ fail | 4 issues(s), we should look it over. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 2.5MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 122 lint findings |
Findings
bandit
- /work/extracted/worlds/papermario/RuleParser.py:260 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/papermario/RuleParser.py:271 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/papermario/RuleParser.py:280 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/papermario/RuleParser.py:406 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
ruff
- /work/extracted/worlds/papermario/Entrance.py:40 E711 Comparison to
Noneshould becond is None - /work/extracted/worlds/papermario/ItemPool.py:4 F401
collections.namedtupleimported but unused - /work/extracted/worlds/papermario/ItemPool.py:5 F401
itertools.chainimported but unused - /work/extracted/worlds/papermario/ItemPool.py:7 F401
.data.chapter_logic.areas_by_chapterimported but unused - /work/extracted/worlds/papermario/ItemPool.py:11 F403
from .options import *used; unable to detect undefined names - /work/extracted/worlds/papermario/ItemPool.py:59 F405
SpiritRequirementsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:66 F405
SeedGoalmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:120 F405
SpiritRequirementsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:139 F405
ShuffleKootFavorsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:141 F405
ShuffleKootFavorsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:148 F405
ShuffleKootFavorsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:155 F405
ShuffleLettersmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:156 F405
ShuffleLettersmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:158 F405
ShuffleLettersmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:161 F405
ShuffleLettersmay be undefined, or defined from star imports - …and 10 more
refunct — ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 0.1MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 32 lint findings |
Findings
ruff
- /work/extracted/worlds/refunct/Items.py:74 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:75 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:76 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:77 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:79 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:80 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:81 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:82 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Locations.py:238 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Options.py:4 F811 Redefinition of unused
Rangefrom line 1:Rangeredefined here - /work/extracted/worlds/refunct/Options.py:4 F401
Options.OptionSetimported but unused - /work/extracted/worlds/refunct/Options.py:4 F401
Options.Visibilityimported but unused - /work/extracted/worlds/refunct/Options.py:5 F401
collectionsimported but unused - /work/extracted/worlds/refunct/Options.py:6 F401
schema.Andimported but unused - /work/extracted/worlds/refunct/Options.py:7 F811 Redefinition of unused
OptionDictfrom line 1:OptionDictredefined here - …and 10 more
Loading