# CLEAN — wasmer

Scanned 2026-03-29 for CWE-407 (algorithmic complexity).

## Findings

- `lib/wasix/src/os/task/thread.rs` — `signals: Vec<Signal>` with `.contains()`: POSIX signal space is 1–31 values; N is strictly bounded. Not actionable.
- `lib/package/src/package/volume/fs.rs` — `intermediate_directories` and `metadata_files` are `BTreeSet<PathBuf>`. CLEAN.
- `lib/compiler-llvm/src/object_file.rs` — `visited: HashSet` with `insert()` return value used as guard before recursion. Correct pattern. CLEAN.
- All other `contains()` calls are on bitflags or string substring checks. CLEAN.

**Result: No actionable CWE-407 defects.**