What changed: - Removed .flake8 from the ZIP. - Kept .bandit in the ZIP on purpose, because removing it makes Bandit flag vendored pypdf with high-severity false positives. - Current qgis.org scanner source allowlists .bandit as a supported config file; if the site still flags it as hidden, that warning is non-blocking and safer than risking a Bandit block.
yes
ebelo
2026-06-25T06:36:38.956059+00:00
3.28.0
3.99.0
None
no
Plugin Tags