# CLEAN — diesel

Scanned 2026-03-29 for CWE-407 (algorithmic complexity).

## Findings

- `diesel_derives/src/sql_function.rs` — `arguments_with_generic_types` and `variadic_generic_indexes` are `Vec` with `.contains()` in proc-macro code, run once at compile time with N bounded to function argument count. Not a runtime defect.
- `diesel_cli/src/infer_schema_internals/foreign_keys.rs` — `safe_tables: &[TableName]` with `.contains()`: called during `diesel print-schema` CLI execution (once per run). Not a runtime hot path.
- `diesel_cli/src/print_schema.rs` — BFS graph traversal uses `BTreeSet` for `visited`. CLEAN.
- All other `contains()` calls are on `HashSet`/`BTreeSet` or string substring checks. CLEAN.

**Result: No actionable CWE-407 defects.**