What changed, and why it matters
This is a trivial compatibility fix for a helper script. In Python 3.13, using importlib.util requires explicitly importing importlib.util. The change adds that missing import so the script can load a version file again. There is no security issue here.
No security action needed. Treat as a normal maintenance/compat fix.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adds ‘import importlib.util’ to contrib/add_cosigner. In Python 3.13, importlib no longer exposes util as an attribute unless the submodule is imported explicitly, causing an AttributeError when calling importlib.util.spec_from_file_location(). The patch restores the script’s functionality on newer Python versions.
Changed components
contrib/add_cosignerInspect captured patch +1 / −0
diff --git a/contrib/add_cosigner b/contrib/add_cosigner
index e782100..80f4263 100755
--- a/contrib/add_cosigner
+++ b/contrib/add_cosigner
@@ -21,6 +21,7 @@ import re
import os
import sys
import importlib
+import importlib.util
import subprocess
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.