build: remove distutils dependency
What changed, and why it matters
This is a tiny build-maintenance change: it replaces the deprecated Python `distutils.sysconfig` module with the newer `sysconfig` module in the package setup script. There is no security vulnerability visible in the diff, no change to cryptographic code, and no disclosed incident. It is a routine compatibility cleanup.
No security action needed. Treat as normal build hygiene; review and merge through standard process.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies setup.py only. It removes import distutils.sysconfig and adds import sysconfig, then changes the single call distutils.sysconfig.get_config_vars() to sysconfig.get_config_vars(). The returned dictionary is assigned to the same variable and used identically afterward. This is a straight API migration with no functional or security-relevant change to the build output or runtime behavior.
Changed components
setup.pyInspect captured patch +2 / −2
diff --git a/setup.py b/setup.py
index 87a259a..fddb619 100644
--- a/setup.py
+++ b/setup.py
@@ -1,18 +1,18 @@
"""setuptools config for wallycore """
from setuptools import setup, Extension
import copy
-import distutils.sysconfig
import os
import platform
import subprocess
import sys
+import sysconfig
def _msg(s):
print(s + '\n', file=sys.stderr)
ABS_PATH = os.path.dirname(os.path.abspath(__file__)) + '/'
CONFIGURE_ENV = copy.deepcopy(os.environ)
-DISTUTILS_ENV = distutils.sysconfig.get_config_vars()
+DISTUTILS_ENV = sysconfig.get_config_vars()
IS_WINDOWS = platform.system() == "Windows"
ARCH_FLAGS = os.environ.get('ARCHFLAGS', '').split()
USE_LIB = os.environ.get('WALLY_ABI_PY_WHEEL_USE_LIB', 'no')
Why this scored 19/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.