slavos1

Was same here and followed [Getting Started](https://zeroserver.io/#getting-started). However, got unstuck by [not using sudo](https://danillolima.com/en/npm/how-to-fix-permissions-on-globally-installing-npm-packages-on-linux/). :star_struck:

Looking at the code, these lines confirm the behaviour -- explicit `import tarfile` must be present otherwise `B202` will not be detected. https://github.com/PyCQA/bandit/blob/4ac55dfaaacf2083497831294b2dcd7e679f8428/bandit/plugins/tarfile_unsafe_members.py#L107-L112