Version comparison

order-processor v0001→v0002

2 added, 2 modified, 9 renamed, 55 vendored

v0001archived 2026-10-07 03:59 v0002archived 2026-10-07 03:59

files changed

+24−5

lines

dependencies

9.2 KB+886 B

package size

new findings

vendored files not shown

Want this change explained in plain English? Set up a model once — Anthropic, OpenAI, Azure OpenAI, or one running on your own machine — then explain this change. lw ai off hides this.

1lw ai add2lw explain order-processor --from 1 --to 2

New findings

3values are redacted

severity	kind	where	detail
high	aws-access-key-id	config.py:6	AKIA…LE (20 chars)
high	stripe-key	config.py:7	sk_l…dc (32 chars)
low	debug-flag	config.py:8	DEBUG = True

severity

kind

where

detail

high

aws-access-key-id

config.py:6

AKIA…LE (20 chars)

high

stripe-key

config.py:7

sk_l…dc (32 chars)

low

debug-flag

config.py:8

DEBUG = True

Before you deploy

configuration impact

Environment variables added

QUEUE_URL

These must exist in the function's environment configuration before you deploy.

AWS services added

sqs

The execution role may need new IAM permissions.

Dependencies

change	package	version	source
added	pydantic	2.9.0	pip · installed
changed	boto3	1.34.0→1.35.20	pip · installed
changed	botocore	1.34.0→1.35.20	pip · installed

change

package

version

source

added

pydantic

2.9.0

pip · installed

changed

boto3

1.34.0→1.35.20

pip · installed

changed

botocore

1.34.0→1.35.20

pip · installed

File changes

13click a file to open its diff

@@ -1,4 +1,4 @@
1	1		Metadata-Version: 2.1
2	2		Name: boto3
3		−	Version: 1.34.0
	3	+	Version: 1.35.20
4	4		Summary: The AWS SDK for Python

@@ -1,4 +1,4 @@
1	1		Metadata-Version: 2.1
2	2		Name: botocore
3		−	Version: 1.34.0
	3	+	Version: 1.35.20
4	4		Summary: Low-level, data-driven core of boto 3

@@ -0,0 +1,10 @@
	1	+	"""Runtime configuration.
	2	+
	3	+	TODO: move these to Secrets Manager before this goes anywhere near production.
	4	+	"""
	5	+
	6	+	AWS_ACCESS_KEY_ID = "AKIA••••••••••••••••"
	7	+	STRIPE_API_KEY = "sk_l••••••••••••••••••••••••••••"
	8	+	DEBUG = True
	9	+
	10	+	MAX_ITEMS = 50

@@ -9,5 +9,6 @@
9	9		"id": order["id"],
10	10		"items": order["items"],
11	11		"total": Decimal(str(order["total"])),
	12	+	"status": "PENDING",
12	13		}
13	14		)

@@ -1,16 +1,19 @@
1		−	"""Validate an incoming order and record it."""
	1	+	"""Validate an incoming order, record it, and queue it for fulfilment."""
2	2
3	3		import json
4	4		import os
5	5
6	6		import boto3
7	7
8		−	from db import put_order
	8	+	from config import MAX_ITEMS
	9	+	from helpers.db import put_order
9	10
10	11		TABLE_NAME = os.environ["TABLE_NAME"]
	12	+	QUEUE_URL = os.environ["QUEUE_URL"]
11	13
12	14		dynamodb = boto3.resource("dynamodb")
13	15		table = dynamodb.Table(TABLE_NAME)
	16	+	sqs = boto3.client("sqs")
14	17
15	18
16	19		def lambda_handler(event, context):
@@ -19,6 +22,10 @@
19	22		if not order.get("items"):
20	23		return {"statusCode": 400, "body": json.dumps({"error": "order has no items"})}
21	24
	25	+	if len(order["items"]) > MAX_ITEMS:
	26	+	return {"statusCode": 422, "body": json.dumps({"error": "too many items"})}
	27	+
22	28		put_order(table, order)
	29	+	sqs.send_message(QueueUrl=QUEUE_URL, MessageBody=json.dumps(order))
23	30
24	31		return {"statusCode": 201, "body": json.dumps({"id": order["id"]})}

@@ -1 +1,2 @@
1		−	boto3==1.34.0
	1	+	boto3==1.35.20
	2	+	pydantic==2.9.0