{"name": "ClaudIA QGIS", "package_name": "claudia_qgis", "version": "0.2.3", "experimental": true, "qgis_min": "3.28.0", "qgis_max": "4.99.0", "downloads": 22, "uploaded_by": "guilhermesanches", "upload_datetime": "2026-09-15T14:37:34.919176", "changelog": "0.2.3 \u2014 Security scan fixes (no behavior change)\r\n\r\nAddresses all 8 findings reported by the plugin portal's Bandit scan on 0.2.2:\r\n- Self-updater now downloads via http.client and accepts only http/https URLs (no file: or custom schemes); it follows the GitHub release redirect to the CDN and still enforces https for the ZIP download and the 20 MB size cap.\r\n- The six empty try/except/pass blocks were replaced with contextlib.suppress scoped to the specific expected exceptions (missing certifi, closing an already-dead socket, QGIS log/message bar unavailable during shutdown).\r\n\r\nVerified: Bandit reports 0 issues; version check over https (production) and http (local dev); ZIP download through the GitHub redirect; file:/ftp:/http: rejected for downloads; headless smoke test of the real plugin on QGIS 3.40 (14/14 passing).\r\n\r\n0.2.2 \u2014 metadata homepage now points to the public GitHub repository (the community connector page requires login).", "external_deps": "", "download_url": "https://plugins.qgis.org/plugins/claudia_qgis/version/0.2.3/download/"}