code-review-env/sample_project/database.py

from config import SETTINGS


def get_connection_url() -> str:
    # Intentional bug for lint/security testing: unsafely concatenated DSN-like value
    return "sqlite:///" + SETTINGS.get("db_path")