Bandit Report

try_except_continue: Try, Except, Continue detected.
Test ID: B112
Severity: LOW
Confidence: HIGH
CWE: CWE-703
File: /custom_nodes/AIGODLIKE-ComfyUI-Translation/__init__.py
Line number: 31
More info: https://bandit.readthedocs.io/en/1.7.9/plugins/b112_try_except_continue.html

27	def try_get_json(path: Path):
28	    for coding in ["utf-8", "gbk"]:
29	        try:
30	            return json.loads(path.read_text(encoding=coding))
31	        except Exception:
32	            continue
33	    return {}
34	
35

blacklist: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/AIGODLIKE-ComfyUI-Translation/__init__.py
Line number: 129
More info: https://bandit.readthedocs.io/en/1.7.9/blacklists/blacklist_imports.html#b404-import-subprocess

125	    elif path.is_dir():
126	        # 移除 .git
127	        if path.name == ".git":
128	            if platform.system() == "darwin":
129	                from subprocess import call
130	                call(['rm', '-rf', path.as_posix()])
131	            elif platform.system() == "Windows":
132	                os.system(f'rd/s/q "{path.as_posix()}"')

start_process_with_partial_path: Starting a process with a partial executable path
Test ID: B607
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/AIGODLIKE-ComfyUI-Translation/__init__.py
Line number: 130
More info: https://bandit.readthedocs.io/en/1.7.9/plugins/b607_start_process_with_partial_path.html

126	        # 移除 .git
127	        if path.name == ".git":
128	            if platform.system() == "darwin":
129	                from subprocess import call
130	                call(['rm', '-rf', path.as_posix()])
131	            elif platform.system() == "Windows":
132	                os.system(f'rd/s/q "{path.as_posix()}"')
133	            return

subprocess_without_shell_equals_true: subprocess call - check for execution of untrusted input.
Test ID: B603
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/AIGODLIKE-ComfyUI-Translation/__init__.py
Line number: 130
More info: https://bandit.readthedocs.io/en/1.7.9/plugins/b603_subprocess_without_shell_equals_true.html

126	        # 移除 .git
127	        if path.name == ".git":
128	            if platform.system() == "darwin":
129	                from subprocess import call
130	                call(['rm', '-rf', path.as_posix()])
131	            elif platform.system() == "Windows":
132	                os.system(f'rd/s/q "{path.as_posix()}"')
133	            return

start_process_with_a_shell: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/AIGODLIKE-ComfyUI-Translation/__init__.py
Line number: 132
More info: https://bandit.readthedocs.io/en/1.7.9/plugins/b605_start_process_with_a_shell.html

128	            if platform.system() == "darwin":
129	                from subprocess import call
130	                call(['rm', '-rf', path.as_posix()])
131	            elif platform.system() == "Windows":
132	                os.system(f'rd/s/q "{path.as_posix()}"')
133	            return
134	        for child in path.iterdir():
135	            rmtree(child)