[bandit]
# B603 (subprocess call - check for execution of untrusted input) fires on
# the single subprocess.run() call in emf_export.py that launches Inkscape
# to convert the rendered SVG to EMF.
#
# This has been reviewed and is safe:
#   - shell is never True (list-form argv, no shell parsing/injection possible)
#   - the executable path is either auto-detected (shutil.which / a small
#     list of known Inkscape install locations) or chosen by the user via
#     a native Qt file-open dialog, and is checked with os.path.isfile()
#     before use
#   - the SVG input path is generated internally via tempfile.mkdtemp()
#   - the EMF output path comes from a native Qt file-save dialog
# No argument is built from untrusted external/network input.
#
# B404 (import subprocess) is the same story at the import statement
# itself - reviewed for the same reason.
#
# See: https://bandit.readthedocs.io/en/latest/plugins/b603_subprocess_without_shell_equals_true.html
skips = B603,B404
