codeaudit 0.9.2__py3-none-any.whl → 0.9.3__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. codeaudit/__about__.py +1 -1
  2. codeaudit/data/sastchecks.csv +1 -0
  3. codeaudit/security_checks.py +1 -2
  4. codeaudit/totals.py +1 -1
  5. {codeaudit-0.9.2.dist-info → codeaudit-0.9.3.dist-info}/METADATA +2 -1
  6. {codeaudit-0.9.2.dist-info → codeaudit-0.9.3.dist-info}/RECORD +9 -9
  7. {codeaudit-0.9.2.dist-info → codeaudit-0.9.3.dist-info}/WHEEL +0 -0
  8. {codeaudit-0.9.2.dist-info → codeaudit-0.9.3.dist-info}/entry_points.txt +0 -0
  9. {codeaudit-0.9.2.dist-info → codeaudit-0.9.3.dist-info}/licenses/LICENSE.txt +0 -0
codeaudit/__about__.py CHANGED
@@ -1,4 +1,4 @@
1
1
  # SPDX-FileCopyrightText: 2025-present Maikel Mardjan <mike@bm-support.org>
2
2
  #
3
3
  # SPDX-License-Identifier: GPL-3.0-or-later
4
- __version__ = "0.9.2"
4
+ __version__ = "0.9.3"
codeaudit/data/sastchecks.csv CHANGED
@@ -54,6 +54,7 @@ Shelve module,shelve.open,High,Only loading a shelve from a trusted source is se
54
54
  Multiprocessing ,connection.recv,High,Connection.recv() uses pickle
55
55
  Multiprocessing ,multiprocessing.connection.Connection,High,Connection.recv() uses pickle
56
56
  Zipfile,zipfile.ZipFile,High,Extracting files within a program should never be trusted by default. This issue is detected when the zipfile and/or tarfile module with an extraction method is used.
57
+ Gzip,gzip.open,Medium,Potential resource consumption if the file is untrusted.
57
58
  shutil,shutil.unpack_archive,Medium,Extracting files within a program should not be trusted by default.
58
59
  shutil,shutil.copy,Medium,Information can be transfered without permission.
59
60
  shutil,shutil.copy2,Medium,Information can be transfered without permission.
codeaudit/security_checks.py CHANGED
@@ -40,8 +40,7 @@ def ast_security_checks():
40
40
 
41
41
  def perform_validations(sourcefile):
42
42
  """For now a list defined here in this file"""
43
- checks = ast_security_checks()
44
- #df = pd.DataFrame(security_validations)
43
+ checks = ast_security_checks()
45
44
  constructs = checks['construct'].to_list()
46
45
 
47
46
  source = read_in_source_file(sourcefile)
codeaudit/totals.py CHANGED
@@ -155,7 +155,7 @@ def overview_per_file(python_file):
155
155
 
156
156
 
157
157
  def overview_count(df):
158
- """returns a dataframe with simple overview of all files"""
158
+ """returns a dataframe with simple overview for all files"""
159
159
  columns_to_sum = [
160
160
  "Number_Of_Lines",
161
161
  "AST_Nodes",
{codeaudit-0.9.2.dist-info → codeaudit-0.9.3.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: codeaudit
3
- Version: 0.9.2
3
+ Version: 0.9.3
4
4
  Summary: Simplified static security checks for Python
5
5
  Project-URL: Documentation, https://github.com/nocomplexity/codeaudit#readme
6
6
  Project-URL: Issues, https://github.com/nocomplexity/codeaudit/issues
@@ -31,6 +31,7 @@ Description-Content-Type: text/markdown
31
31
  [![PyPI - Version](https://img.shields.io/pypi/v/codeaudit.svg)](https://pypi.org/project/codeaudit)
32
32
  [![PyPI - Python Version](https://img.shields.io/pypi/pyversions/codeaudit.svg)](https://pypi.org/project/codeaudit)
33
33
  [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/10970/badge)](https://www.bestpractices.dev/projects/10970)
34
+ [![PyPI Downloads](https://static.pepy.tech/badge/codeaudit)](https://pepy.tech/projects/codeaudit)
34
35
 
35
36
  Python Codeaudit - A modern Python source code analyzer based on distrust.
36
37
 
{codeaudit-0.9.2.dist-info → codeaudit-0.9.3.dist-info}/RECORD RENAMED
@@ -1,4 +1,4 @@
1
- codeaudit/__about__.py,sha256=-OcKgQZdiaIfag-0pWz8xuMH01f-FH-JoMrw5piCMUg,144
1
+ codeaudit/__about__.py,sha256=jIE4jASfBZpgGnJjWnCN74eGB6UpgAFQB0RIjCRNCoQ,144
2
2
  codeaudit/__init__.py,sha256=YGs6qU0BVHPGtXCS-vfBDLO4TOfJDLTWMgaFDTmi_Iw,157
3
3
  codeaudit/altairplots.py,sha256=YFXrJxBjN44Mr2JEGad8h_KjSOYuyzt4YE8JyQr9Kj8,2183
4
4
  codeaudit/checkmodules.py,sha256=_oMbidp0iKUYF8yOieFIIiCMQ3nl6qC-OhNDnYclf0Q,4895
@@ -8,12 +8,12 @@ codeaudit/filehelpfunctions.py,sha256=eM-B9JeF3Krx2vaefaqLrCAl-lrtec_fy0NbTkj7a3
8
8
  codeaudit/htmlhelpfunctions.py,sha256=-SMsyfF7TRIfJkrUqoJuh7AoG1RVrYFsZfFljoxVHXc,3246
9
9
  codeaudit/issuevalidations.py,sha256=Pcl6Xrpak1SDJq7liuYx2Nb0inNeq6s131dF-L40S5w,5607
10
10
  codeaudit/reporting.py,sha256=gmRbhoC3mwws1eXWypyUZKeMPm3wcvDqj3aoSaWEfIE,21333
11
- codeaudit/security_checks.py,sha256=n_FMF2b--vpkX3E4wvFcXr9pJO-_sdUq2NHuj6mvMvw,2208
11
+ codeaudit/security_checks.py,sha256=wEO_A054zXmLccWGREi6cNADa4IgoOPxHsq-Je5iMIY,2167
12
12
  codeaudit/simple.css,sha256=QyqcZKLqj4JXByTskabrOEJYfn2L2o8XfTLyeO1RxeI,3210
13
- codeaudit/totals.py,sha256=yN_IepZte4H5Rk7T8UzJFc_SL4RtzYV_Z1tEC9hEyXg,6357
14
- codeaudit/data/sastchecks.csv,sha256=qo2B-nR_6eOI0ycASSNvU0jTmclax3OScgybucXQY10,6981
15
- codeaudit-0.9.2.dist-info/METADATA,sha256=R3ZRlWehkSpMezvrMMJPV4Cl_FeDreLsMivLB2vK8Qs,6953
16
- codeaudit-0.9.2.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
17
- codeaudit-0.9.2.dist-info/entry_points.txt,sha256=7w6I8zii62nJHIIF30CRP5g1z8enMqF1pZEDdlw4HcQ,55
18
- codeaudit-0.9.2.dist-info/licenses/LICENSE.txt,sha256=-5gWaMGKJ54oX8TYP7oeg2zITdTapzyWl9PP0tispuA,34674
19
- codeaudit-0.9.2.dist-info/RECORD,,
13
+ codeaudit/totals.py,sha256=V809eImKZepsKqKMNr0lNfJ0ILf7qFjS_NrU-veVpm0,6358
14
+ codeaudit/data/sastchecks.csv,sha256=10SaYbM2pljuxWYpq31PUNGqr4NgkIglkVsOMqOj1qk,7060
15
+ codeaudit-0.9.3.dist-info/METADATA,sha256=Ly2qH2DLQCWfzlxp997ULDePFi_dTRPD25RVjyXme2o,7053
16
+ codeaudit-0.9.3.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
17
+ codeaudit-0.9.3.dist-info/entry_points.txt,sha256=7w6I8zii62nJHIIF30CRP5g1z8enMqF1pZEDdlw4HcQ,55
18
+ codeaudit-0.9.3.dist-info/licenses/LICENSE.txt,sha256=-5gWaMGKJ54oX8TYP7oeg2zITdTapzyWl9PP0tispuA,34674
19
+ codeaudit-0.9.3.dist-info/RECORD,,