This repository was archived by the owner on Jun 5, 2025. It is now read-only.
This repository was archived by the owner on Jun 5, 2025. It is now read-only.
CodeGate doesn't distinguish Python built-in modules and external packages #518
Closed
Description
Describe the issue
CodeGate isn't aware of the built-in Python modules, and may treat imports of these as references to external packages.
The specific case I've encountered is hashlib
- at one time it was an external package and so exists in PyPI and thus also in our data set, but the external package was archived and moved to built-in ages ago. When CodeGate encounters import hashlib
in code, it finds the archived package in the vector DB, and reports it as archived/deprecated.
Insight report - https://www.insight.stacklok.com/report/pypi/hashlib
PyPI entry - https://pypi.org/project/hashlib/20081119/
Steps to Reproduce
Reference the app.py file from the codegate-demonstration repo using Copilot or Continue chat.
Operating System
MacOS (Arm)
IDE and Version
VS Code 1.96.2
Extension and Version
Any
Provider
GitHub Copilot
Model
Any
Logs
2025-01-08T21:19:27.008Z [debug ] Found matching packages in sqlite-vec database matched_packages=['hashlib (crates)', 'hashlib (pypi)', 'invokehttp (pypi)'] module=codegate pathname=/app/src/codegate/pipeline/codegate_context_retriever/codegate.py
2025-01-08T21:19:27.008Z [debug ] Final context message context_message=Context: hashlib is a Rust package available on Crates ecosystem. However, this package is found to be archived and no longer maintained. For additional information refer to https://www.insight.stacklok.com/report/crates/hashlib - Package offers this functionality: Provide various hash algorithms under a same abstraction layer.
hashlib is a Python package available on PyPI ecosystem. However, this package is found to be deprecated and no longer recommended for use. For additional information refer to https://www.insight.stacklok.com/report/pypi/hashlib - Package offers this functionality: Secure hash and message digest algorithm library
Additional Context
No response