Videos
» pip install safety
pyscan v0.1.6 | Github
-
can be used within large projects.
-
automatically finds dependencies either from configuration files or within source code.
-
support for poetry,hatch,filt,pdm and can be integrated into existing build processes.
-
hasn't been battle-hardened yet. PRs and issue makers welcome.
Install
pip install pyscan-rs
or
cargo install pyscan
Usage
Go to your project directory and run:
pyscan
or
pyscan -d path/to/src
I posted here about 5 months ago regarding pyscan's release, its been improving ever since but its still not there yet. It is a dependency vulnerability scanner at the moment but i'd like to expand this tool so that it could make PyPI's ecosystem a little less scary and let developers download packages without worrying about supply-chain issues. Grateful for all the support so far from the Python community.
» pip install pip-audit