Repository navigation
[bundle] Update 23 worlds (worlds-wheels-2026-10-13) - #62
Merged
Merged
Conversation
oliver-the-multiworld-squirrel
Bot
requested a review
from lallaria
as a code owner
October 13, 2026 22:35
oliver-the-multiworld-squirrel
Bot
added
APWorld Update
Needs IGDB id
New APWorld
labels
Contributor
Karen: Quality Assurance ManagerHere to give a seal of quality to your APWorld, because no one wants to be a vector for an exploit.
|
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
alttpr — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | 2 dependency(ies) audited, no known advisories. |
factorio — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | 1 dependency(ies) audited, no known advisories. |
ff4fe — ❌ fail
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
❌ fail | Found 36 known vulnerabilities and no adverse project statuses in 4 packages |
Details
pip_audit
- pillow 12.1.1 has 36 known vulnerabilities:
-
- PYSEC-2026-3453: Pillow: Controlled heap out-of-bounds write in Pillow
ImageCmsTransform.apply()via output mode mismatch
- PYSEC-2026-3453: Pillow: Controlled heap out-of-bounds write in Pillow
-
- PYSEC-2026-165: Pillow has an integer overflow when processing fonts
-
- PYSEC-2026-3452: Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
-
- PYSEC-2026-3451: Pillow: Heap out-of-bounds write
Image.paste()/Image.crop()via signed coordinate overflow
- PYSEC-2026-3451: Pillow: Heap out-of-bounds write
-
- PYSEC-2026-3495: Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
-
- PYSEC-2026-3494: Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
-
- PYSEC-2026-165: No summary provided
-
- PYSEC-2026-3496: Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
-
- PYSEC-2026-2250: FITS GZIP decompression bomb in Pillow
-
- PYSEC-2026-2255: No summary provided
-
- PYSEC-2026-2256: No summary provided
-
- PYSEC-2026-2251: No summary provided
-
- PYSEC-2026-2252: No summary provided
-
- PYSEC-2026-3494: Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
-
- PYSEC-2026-2254: No summary provided
-
- PYSEC-2026-3495: Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
-
- PYSEC-2026-3493: Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
-
- PYSEC-2026-2255: Pillow
BdfFontFile:Image.new()called without_decompression_bomb_check()— bomb protection bypass via font loading
- PYSEC-2026-2255: Pillow
-
- PYSEC-2026-3451: No summary provided
-
- PYSEC-2026-2252: Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
-
- PYSEC-2026-3452: No summary provided
-
- PYSEC-2026-2250: No summary provided
-
- PYSEC-2026-2254: Pillow:
FontFile.compile():Image.new()called without_decompression_bomb_check()
- PYSEC-2026-2254: Pillow:
-
- PYSEC-2026-2874: Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
nine_sols — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
pokemon_crystal — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
rac_odd_couple — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
rac_size_matters — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | 1 dependency(ies) audited, no known advisories. |
rotn — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
smo — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
spyro3 — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
tloz_oos — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 3 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
tloz_ph — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
ttyd — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | 1 dependency(ies) audited, no known advisories. |
tunic — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
ucg — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
wario_ware_inc — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
yachtdice — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
zelda2 — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
pip_audit |
✅ pass | no declared dependencies to audit |
There are some problems I'm not willing to overlook. Please fix them and try again.
IGDB PR lookupKaren flagged this PR as needing an IGDB id. Pick a candidate from the list below, edit
|
Contributor
Karen: Isolated QA ChecksWorld generation (fuzzer) results
|
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 26.9MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 181 linter flags |
Findings
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
alttpr - ⚠️ warn
| Check | Status | Notes |
|---|---|---|
fuzzer |
success=0 failure=0 timeout=0 ignored=10 rom=0 real=0 total=10 | |
bandit |
❌ fail | 34 issues(s), we should look it over. |
size |
✅ pass | a very reasonable 5.0MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
10 top-level network module imports, these are probably ok, but check them out. | |
ruff |
captured | 2337 linter flags |
Findings
bandit
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Gui.py:61 [B103/MEDIUM] Chmod setting a permissive mask 0o755 on file (NOT PARSED).
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/MultiServer.py:423 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/MultiServer.py:423 [B323/MEDIUM] By default, Python will create a secure, verified ssl context for use in such classes as HTTPSConnection. However, it still allows using an insecure context via the _create_unverified_context that reverts to the previous behavior that does not validate certificates or perform hostname checks.
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Plando.py:31 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Rom.py:102 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Rom.py:151 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Rom.py:159 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Rom.py:183 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Rom.py:216 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/TestSuite.py:36 [B602/HIGH] subprocess call with shell=True identified, security issue.
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/TestSuiteStat.py:93 [B602/HIGH] subprocess call with shell=True identified, security issue.
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Utils.py:129 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/Utils.py:773 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/debug_restricted_cave.py:118 [B608/MEDIUM] Possible SQL injection vector through string-based query construction.
- /work/extracted/worlds/alttpr/ALttPDoorRandomizer/resources/ci/common/common.py:150 [B103/MEDIUM] Chmod setting a permissive mask 0o755 on file (BUILD_FILENAME).
- …and 19 more
net
- worlds/alttpr/Rom.py: top-level
from urllib.request import ...at line 10 - worlds/alttpr/ALttPDoorRandomizer/Utils.py: top-level
import urllib.requestat line 13 - worlds/alttpr/ALttPDoorRandomizer/MultiServer.py: top-level
import urllib.requestat line 10 - worlds/alttpr/ALttPDoorRandomizer/resources/ci/common/list_actions.py: top-level
import urllib.requestat line 8 - worlds/alttpr/ALttPDoorRandomizer/resources/ci/common/get_upx.py: top-level
import urllib.requestat line 4 - worlds/alttpr/ALttPDoorRandomizer/resources/ci/common/get_get_pip.py: top-level
import urllib.requestat line 4 - worlds/alttpr/ALttPDoorRandomizer/source/tools/MysteryUtils.py: top-level
import urllib.requestat line 6 - worlds/alttpr/ALttPDoorRandomizer/source/classes/SpriteSelector.py: top-level
from urllib.parse import ...at line 8 - worlds/alttpr/ALttPDoorRandomizer/source/classes/SpriteSelector.py: top-level
from urllib.request import ...at line 9 - worlds/alttpr/ALttPDoorRandomizer/source/classes/CustomSettings.py: top-level
import urllib.requestat line 2
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
factorio - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
❌ fail | 1 issues(s), we should look it over. |
size |
✅ pass | a very reasonable 1.2MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 200 linter flags |
Findings
bandit
- /work/extracted/worlds/factorio/Mod.py:105 [B701/HIGH] By default, jinja2 sets autoescape to False. Consider using autoescape=True or use the select_autoescape function to mitigate XSS vulnerabilities.
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
ff4fe - ⚠️ warn
| Check | Status | Notes |
|---|---|---|
fuzzer |
success=7 failure=3 timeout=0 ignored=0 rom=0 real=3 total=10 | |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 0.2MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 91 linter flags |
Findings
fuzzer
- FillError (1)
- 'Adamant' (2)
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
nine_sols - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=1 failure=0 timeout=0 ignored=9 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 4.5MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 152 linter flags |
Findings
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
pokemon_crystal - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 4.3MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 512 linter flags |
Findings
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
rac_odd_couple - ❌ fail
| Check | Status | Notes |
|---|---|---|
fuzzer |
❌ fail | success=0 failure=10 timeout=0 ignored=0 rom=0 real=10 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 0.1MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
2 top-level network module imports, these are probably ok, but check them out. | |
ruff |
captured | 23 linter flags |
Findings
fuzzer
- Cannot generate: the following games could not be installed and have no apworld fallback: 'Ratchet & Clank: The Odd Couple' (10)
net
- worlds/rac_odd_couple/client/backend.py: top-level
from http.server import ...at line 25 - worlds/rac_odd_couple/client/backend.py: top-level
from urllib.parse import ...at line 27
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
rac_size_matters - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=1 failure=0 timeout=0 ignored=9 rom=0 real=0 total=10 |
bandit |
❌ fail | 3 issues(s), we should look it over. |
size |
✅ pass | a very reasonable 2.6MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 153 linter flags |
Findings
bandit
- /work/extracted/worlds/rac_size_matters/pypine/pypine/pine.py:123 [B108/MEDIUM] Probable insecure usage of temp file/directory.
- /work/extracted/worlds/rac_size_matters/pypine/pypine/pine.py:133 [B108/MEDIUM] Probable insecure usage of temp file/directory.
- /work/extracted/worlds/rac_size_matters/pypine/pypine/pine.py:137 [B108/MEDIUM] Probable insecure usage of temp file/directory.
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
rotn - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 0.1MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 91 linter flags |
Findings
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
smo - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
❌ fail | 1 issues(s), we should look it over. |
size |
✅ pass | a very reasonable 0.3MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 158 linter flags |
Findings
bandit
- /work/extracted/worlds/smo/Connector/Client.py:748 [B104/MEDIUM] Possible binding to all interfaces.
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
spyro3 - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=3 failure=0 timeout=0 ignored=7 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 0.4MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 301 linter flags |
Findings
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
tloz_oos - ⚠️ warn
| Check | Status | Notes |
|---|---|---|
fuzzer |
success=9 failure=1 timeout=0 ignored=0 rom=0 real=1 total=10 | |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 1.0MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 121 linter flags |
Findings
fuzzer
- FillError (1)
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
tloz_ph - ❌ fail
| Check | Status | Notes |
|---|---|---|
fuzzer |
❌ fail | success=2 failure=8 timeout=0 ignored=0 rom=0 real=8 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 3.7MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 374 linter flags |
Findings
fuzzer
- Phantom Hourglass: failed GER after 10 attempts. (8)
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
ttyd - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
❌ fail | 1 issues(s), we should look it over. |
size |
✅ pass | a very reasonable 4.3MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 774 linter flags |
Findings
bandit
- /work/extracted/worlds/ttyd/Rules.py:158 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
tunic - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=5 failure=0 timeout=0 ignored=5 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 1.4MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 120 linter flags |
Findings
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
ucg - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 0.3MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 14 linter flags |
Findings
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
wario_ware_inc - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=1 failure=0 timeout=0 ignored=9 rom=0 real=0 total=10 |
bandit |
❌ fail | 2 issues(s), we should look it over. |
size |
✅ pass | a very reasonable 0.1MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 91 linter flags |
Findings
bandit
- /work/extracted/worlds/wario_ware_inc/rom.py:24 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
- /work/extracted/worlds/wario_ware_inc/rom.py:133 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
yachtdice - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
size |
✅ pass | a very reasonable 0.4MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 38 linter flags |
Findings
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
zelda2 - ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
❌ fail | 1 issues(s), we should look it over. |
size |
✅ pass | a very reasonable 0.1MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 88 linter flags |
Findings
bandit
- /work/extracted/worlds/zelda2/Rom.py:227 [B324/HIGH] Use of weak MD5 hash for security. Consider usedforsecurity=False
ruff
- Run
pip install ruff && ruff check --fixon your repo to fix many of these
![karen-head-of-multiworld-qa[bot]](https://avatars.githubusercontent.com/in/3588863?s=60&v=4){kind=small}
lallaria
force-pushed
the
update/worlds-wheels-2026-10-13
branch
from
October 14, 2026 00:07
bcac2ad to
e4e26b7
Compare
Signed-off-by: Delilah (Lindsay W) <lindsaydiane@gmail.com>
lallaria
force-pushed
the
update/worlds-wheels-2026-10-13
branch
from
October 14, 2026 00:10
e4e26b7 to
050b134
Compare
Contributor
|
pulled out tracker, tswift, glassanimals (latter 2 are updated on their own, don't need worlds update), and removed the accidental full delete. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hey folks, I found a bunch of new updates for 23 worlds. I'm gonna grab some info on them for y'all.
Location:
MultiworldGG/MultiworldGG-Beta@worlds-wheels-2026-10-13Release tag:
worlds-wheels-2026-10-13APWorlds:
albw,alttpr,factorio,ff4fe,glassanimals,nine_sols,pokemon_crystal,rac_odd_couple,rac_size_matters,rotn,smo,spyro3,taylorswift,tloz_oos,tloz_ph,tracker,tracker_addons,ttyd,tunic,ucg,wario_ware_inc,yachtdice,zelda2albw:worlds_albw-0.3.6-py3-none-any.whl(8.44 MB)alttpr:worlds_alttpr-1.6.1-py3-none-any.whl(1.15 MB)factorio:worlds_factorio-0.0.1-py3-none-any.whl(1.04 MB)ff4fe:worlds_ff4fe-0.0.1-py3-none-any.whl(56 KB)glassanimals:worlds_glassanimals-1.1.0-py3-none-any.whl(15 KB)nine_sols:worlds_nine_sols-0.6.4-py3-none-any.whl(4.08 MB)pokemon_crystal:worlds_pokemon_crystal-6.0.3-py3-none-any.whl(983 KB)rac_odd_couple:worlds_rac_odd_couple-0.0.1-py3-none-any.whl(28 KB)rac_size_matters:worlds_rac_size_matters-0.5.6-py3-none-any.whl(1.70 MB)rotn:worlds_rotn-0.17.0-py3-none-any.whl(19 KB)smo:worlds_smo-1.7.6-py3-none-any.whl(71 KB)spyro3:worlds_spyro3-1.4.0-py3-none-any.whl(72 KB)taylorswift:worlds_taylorswift-1.2.6-py3-none-any.whl(29 KB)tloz_oos:worlds_tloz_oos-24.2.4-py3-none-any.whl(278 KB)tloz_ph:worlds_tloz_ph-0.10.1-py3-none-any.whl(2.53 MB)tracker:worlds_tracker-0.0.1-py3-none-any.whl(99 KB)tracker_addons:worlds_tracker_addons-0.0.1-py3-none-any.whl(3.8 KB)ttyd:worlds_ttyd-0.14.0-py3-none-any.whl(1.54 MB)tunic:worlds_tunic-5.0.2-py3-none-any.whl(157 KB)ucg:worlds_ucg-1.4.1-py3-none-any.whl(38 KB)wario_ware_inc:worlds_wario_ware_inc-1.1.2-py3-none-any.whl(35 KB)yachtdice:worlds_yachtdice-2.3.4-py3-none-any.whl(100 KB)zelda2:worlds_zelda2-1.1.0-py3-none-any.whl(26 KB)Karen Head of Multiworld QA bot is gathering the manifests for 23 worlds and cross referencing. She'll review them individually in a moment.