fix: race conditions in lock pop, CSV formula injection, serialize_finding None leak, consolidate plans, update docs

guarddog_nexus/routes/api_packages.py

@@ -21,6 +21,7 @@ from ..db.engine import get_session
 from ..db.models import Scan
 from ..db.queries import build_package_list_query
 from ..schemas import PackageDetailOut, PackageListResponse, serialize_finding
+from .api_scans import _csv_safe
 
 router = APIRouter(prefix="/api/v1/packages", tags=["packages"])
 
@@ -102,8 +103,8 @@ async def export_packages_csv(
     for r in rows:
         writer.writerow(
             [
-                r.pkg_name,
-                r.pkg_ver,
+                _csv_safe(r.pkg_name),
+                _csv_safe(r.pkg_ver),
                 r.ecosystem,
                 r.repository,
                 r.last_scan.isoformat() if r.last_scan else "",