What did nittim read in benfred/py-spy?

nittim read 76 of 76 eligible files in benfred/py-spy. The reading ran on October 29, 2026. It was taken at commit 353afa6.

Did nittim find committed secrets or vulnerable dependencies in benfred/py-spy?

The rule-based scan found 0 committed secrets and 2 vulnerable dependencies in benfred/py-spy. Affected: quick-xml (RUSTSEC-2026-0194, RUSTSEC-2026-0195).

Is benfred/py-spy production ready?

A free scan is not a verdict. A full audit gives one.

← Browse the report library

a public repository, read by nittim

benfred/py-spy security audit

What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.

Sampling profiler for Python programs

Rust · 15.6k stars · last push October 28, 2026

benfred/py-spy is a sampling profiler for Python programs written in Rust. The tool enables developers to analyze the performance characteristics of Python applications by collecting runtime data without requiring code instrumentation.

nittim scanned 76 files in benfred/py-spy and found evidence of concern. The scan identified 2 vulnerable runtime dependencies. The package quick-xml has known issues: RUSTSEC-2026-0194 and RUSTSEC-2026-0195.

Developers should run a full audit to understand the specific nature of these vulnerabilities and their potential impact on the profiler. After addressing the vulnerable dependencies, rescan the repository to confirm that the issues have been resolved.

Written from nittim's own scan on October 29, 2026; rescanned when the repository changes.

No verdict. The rule-based check reports hard evidence, or reports that it found none. Neither is a judgment on whether this code is safe to ship.

What was read — rule-based scan

Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.

Read 76 of 76 eligible files. Commit 353afa6. 2026-10-29.

What the scanners found

Committed secrets on production paths: 0
Vulnerable runtime dependencies: 2

quick-xml (RUSTSEC-2026-0194, RUSTSEC-2026-0195)

Run it yourself

Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.

Scan your own repo

Questions

What did nittim read in benfred/py-spy?: nittim read 76 of 76 eligible files in benfred/py-spy. The reading ran on October 29, 2026. It was taken at commit 353afa6.
Did nittim find committed secrets or vulnerable dependencies in benfred/py-spy?: The rule-based scan found 0 committed secrets and 2 vulnerable dependencies in benfred/py-spy. Affected: quick-xml (RUSTSEC-2026-0194, RUSTSEC-2026-0195).
Is benfred/py-spy production ready?: A free scan is not a verdict. A full audit gives one.

More like this

More Rust repositories →

Add the badge to your README

README badge

[![nittim](https://nittim.com/api/badge/benfred/py-spy)](https://nittim.com/library/benfred/py-spy)