codeaudit 1.8.0__tar.gz → 1.9.0__tar.gz

codeaudit-1.9.0/.github/workflows/python-test.yml

@@ -0,0 +1,31 @@
+name: Python Package Test
+
+on:
+  push:
+    paths:
+      - 'src/**'
+      - 'tests/**'
+  pull_request:
+    paths:
+      - 'src/**'
+      - 'tests/**'
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:      
+      - uses: actions/checkout@v5
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v6        
+        with:
+          python-version: 3.14
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip hatch
+
+      - name: Test with hatch
+        run: |
+          hatch test -acr

codeaudit-1.9.0/.github/workflows/sast_validation.yml

@@ -0,0 +1,45 @@
+# SAST scan with Python Code Audit on GitHub Actions 
+# Uses the development version!! So make sure it always works -)
+
+name: Python Code Audit SAST Scan
+
+on:
+  push:
+    paths:
+      - 'src/**'
+  pull_request:
+    paths:
+      - 'src/**'
+
+jobs:
+  codeaudit-scan:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.14"
+
+      - name: Upgrade pip
+        run: python -m pip install --upgrade pip
+
+      - name: Install Python Code Audit
+        run: python -m pip install -e .
+
+      - name: Show version
+        run: codeaudit --version
+
+      - name: Run SAST scan
+        run: |
+          codeaudit cimode . --output text | tee codeaudit-output.text
+          exit ${PIPESTATUS[0]}
+
+      - name: Upload scan artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: codeaudit-${{ github.ref_name }}
+          path: codeaudit-output.text

{codeaudit-1.8.0 → codeaudit-1.9.0}/CHANGELOG.md

@@ -1,5 +1,41 @@
 # Change Log
 
+## Version 1.9.0:
+
+**Added**
+
+* Support for scanning local and remote `.tar.gz` files using the `filescan` API function, simplifying package scanning before PyPI publication (available via `codeaudit filescan` and `codeaudit overview` CLI commands).
+* Added `"test"` to the default collection of excluded scan directories.
+
+**Changed**
+
+* Improved the `filescan` API function.
+* Dropped active installation support for Python versions older than 3.12 (code analysis support for older Python versions remains available).
+* Updated GitHub Actions to use Node.js 24.
+* Optimized the GitHub testing workflow to ignore documentation-only changes.
+
+
+**Documentation**
+
+* Updated and improved unit tests to reflect current functionality and test coverage.
+
+
+## Version 1.8.1:
+
+**Added**
+- Dashboard: Updated info text on Dashboard version.
+- Updated secrets list for egress scanning.
+
+**Changed**
+- Reporting (WASM version): Updated imported modules display logic—submodules and private modules are now hidden so that only real imported external modules are shown.
+
+**Fixed**
+- Reporting (WASM version): Resolved an error in the imported modules.
+
+**Documentation**
+- Improved API documentation.
+- Various minor improvements.
+
 ## Version 1.8.0:
 
 

{codeaudit-1.8.0 → codeaudit-1.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codeaudit
-Version: 1.8.0
+Version: 1.9.0
 Summary: A modern Python security source code analyzer (SAST) based on distrust.
 Project-URL: Homepage, https://codeaudit.nocomplexity.com
 Project-URL: Documentation, https://github.com/nocomplexity/codeaudit#readme
@@ -10,19 +10,19 @@ Author-email: Maikel Mardjan <mike@bm-support.org>
 License-Expression: GPL-3.0-or-later
 License-File: LICENSE.txt
 Keywords: Complexity Checker,Python SAST,SAST,SAST API
-Classifier: Development Status :: 4 - Beta
+Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: Science/Research
 Classifier: Programming Language :: Python
-Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Security
 Classifier: Topic :: Software Development :: Quality Assurance
-Requires-Python: >=3.11
+Requires-Python: >=3.12
 Requires-Dist: altair==6.0.0
+Requires-Dist: fileaudit
 Requires-Dist: fire==0.7.1
 Requires-Dist: pandas>=2.3
 Provides-Extra: test

{codeaudit-1.8.0 → codeaudit-1.9.0}/SECURITY.md

@@ -20,7 +20,7 @@ I will send a response indicating the next steps in handling your report. After
 
 
 > [!TIP]
-> To learn more about security, please visit [Simplify Cyber Security](https://nocomplexity.com/simplify-security/). And do not hestite to join-in to make these Free and Open Security Playbooks better!
+> To learn more about security, please visit [Simplify Cyber Security](https://nocomplexity.com/simplify-security/). And do not hesitate to join-in to make these Free and Open Security Playbooks better!
 
 
 

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/cimode.md

@@ -198,12 +198,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
-          python-version: "3.13"
+          python-version: "3.14"
 
       - name: Upgrade pip
         run: python -m pip install --upgrade pip
@@ -220,7 +220,7 @@ jobs:
           exit ${PIPESTATUS[0]}
 
       - name: Upload scan artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: codeaudit-${{ github.ref_name }}
           path: codeaudit-output.text
@@ -243,10 +243,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
@@ -263,7 +263,7 @@ jobs:
         run: codeaudit cimode . --output html > codeaudit-output.html
 
       - name: Upload scan artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: codeaudit-${{ github.ref_name }}
           path: codeaudit-output.html

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/codeauditcommands.md

@@ -1,6 +1,6 @@
 % THIS FILE IS GENERATED! - Use CLIcommands.ipynb to make it better!
 # Commands Overview
-Python Code Audit commands for: version: 1.8.0
+Python Code Audit commands for: version: 1.9.0
 ```
 ----------------------------------------------------
  _                    __             _
@@ -16,8 +16,8 @@ Usage: codeaudit COMMAND <directory|package>  [report.html]
 Depending on the command, you must specify a local directory, a Python file, or a package name hosted on PyPI.org.Reporting: The results are generated as a static HTML report for viewing in a web browser.
 
 Commands:
-  overview             Generates an overview report of code complexity and security indicators.
-  filescan             Scans Python source code or PyPI packages for security weaknesses.
+  overview             Generate an overview report of code complexity and security indicators.
+  filescan             Scan Python source code, PyPI packages, or tar.gz archives for security weaknesses.
   cimode               Run a SAST scan for CI workflows.
   modulescan           Generate a report on known vulnerabilities in Python modules and packages.
   checks               Creates an HTML report of all implemented security checks.
@@ -28,50 +28,76 @@ Use the Python Code Audit documentation (https://codeaudit.nocomplexity.com) to
 ```
 ## codeaudit overview
 ```text
-Generates an overview report of code complexity and security indicators.
+Generate an overview report of code complexity and security indicators.
 
-This function analyzes a Python project to produce a high-level overview of
-complexity and security-related metrics. The input may be either:
+This function analyzes a Python project and generates a high-level HTML
+overview of code complexity, project size, module dependencies, and
+security-related indicators.
 
-- A local directory containing Python source files
-- The name of a package hosted on PyPI.org
+The input can be one of the following:
 
-So:
-codeaudit overview <package-name|directory> [reportname.html]
+* A local directory containing Python source files
+* A local or remote ``.tar.gz`` source archive
+* The name of a package hosted on PyPI.org
 
-For PyPI packages, the source distribution (sdist) is downloaded,
+codeaudit overview <package-name|directory|archive.tar.gz> [reportname.html]
+
+For a local or remote ``.tar.gz`` archive, the archive is validated,
+extracted to a temporary directory, scanned, and removed after the report
+has been generated.
+
+For a PyPI package, the source distribution (sdist) is downloaded,
 extracted to a temporary directory, scanned, and removed after the report
-is generated.
+has been generated.
+
+The report includes:
 
-The report includes summary statistics, security risk indicators based on
-complexity and total lines of code, a list of discovered modules, per-file
-metrics, and a visual overview. Results are written to a static HTML file.
+* Summary statistics for the analyzed project
+* Security concern indicators based on maximum code complexity
+  and total lines of code
+* A list of discovered standard-library and external modules
+* Detailed metrics for each Python source file
+* A visual overview of the collected metrics
+* Advice for performing a full SAST scan with ``codeaudit filescan``
 
 Examples:
     Generate an overview report for a local project directory::
 
         codeaudit overview /projects/mycolleaguesproject
 
+    Generate an overview report for a local ``.tar.gz`` archive::
+
+        codeaudit overview /path/to/myproject.tar.gz
+
+    Generate an overview report for a remote ``.tar.gz`` archive::
+
+        codeaudit overview https://example.com/myproject.tar.gz
+
     Generate an overview report for a PyPI package::
 
-        codeaudit overview linkaudit #A nice project on PyPI.org
+        codeaudit overview linkaudit
 
-        codeaudit overview pydantic  #A complex project on PyPI.org from a security perspective?
+        codeaudit overview pydantic
+
+    Specify an output report file::
+
+        codeaudit overview /projects/mycolleaguesproject report.html
 
 Args:
-    directory (str): Path to a local directory containing Python source files
-        or the name of a package available on PyPI.org.
+    directory (str): Path to a local directory containing Python source
+        files, a local or remote ``.tar.gz`` source archive, or the name of
+        a package available on PyPI.org.
     filename (str, optional): Name (and optional path) of the HTML file to
-        write the overview report to. The filename should use the ``.html``
-        extension. Defaults to ``DEFAULT_OUTPUT_FILE``.
+        write the overview report to. The filename should use the
+        ``.html`` extension. Defaults to ``DEFAULT_OUTPUT_FILE``.
 
 Returns:
-    None. The function writes a static HTML overview report to disk.
+    None: The function writes a static HTML overview report to disk.
 
 Raises:
-    SystemExit: If the provided path is not a directory, contains no Python
-        files, or is neither a valid local directory nor a valid PyPI
-        package name.
+    SystemExit: If the provided path is not a directory, contains no
+        Python files, is an invalid ``.tar.gz`` archive, or is neither a
+        valid local input nor a valid PyPI package name.
 str(object='') -> str
 str(bytes_or_buffer[, encoding[, errors]]) -> str
 
@@ -133,26 +159,32 @@ errors defaults to 'strict'.
 ```
 ## codeaudit filescan
 ```text
-Scans Python source code or PyPI packages for security weaknesses.
+Scan Python source code, PyPI packages, or tar.gz archives for security weaknesses.
+
 This function performs static application security testing (SAST) on a
 specified input. The input can be one of the following:
 
 * A local directory containing Python source code
 * A single local Python file
+* A local or remote ``.tar.gz`` source archive
 * The name of a package hosted on PyPI
 
-codeaudit filescan <pythonfile|package-name|directory> [reportname.html] [--nosec]
+codeaudit filescan <pythonfile|package-name|directory|archive.tar.gz> [reportname.html] [--nosec]
 
 Based on the input type, the function analyzes the source code for potential
 security issues, generates an HTML report summarizing the findings, and
 writes the report to disk.
 
+For a local or remote ``.tar.gz`` archive, the archive is validated,
+extracted to a temporary directory, scanned as a source directory, and
+cleaned up after the scan completes.
+
 If a PyPI package name is provided, the function downloads the source
 distribution (sdist), extracts it to a temporary directory, scans the
 extracted source code, and cleans up all temporary files after the scan
 completes.
 
- Examples:
+Examples:
 
     Scan a local directory and write the report to ``report.html``::
 
@@ -166,49 +198,56 @@ completes.
 
         codeaudit filescan myexample.py
 
+    Scan a local tar.gz archive::
+
+        codeaudit filescan /path/to/package.tar.gz
+
+    Scan a remote tar.gz archive::
+
+        codeaudit filescan https://example.com/package.tar.gz
+
     Scan a package hosted on PyPI::
 
         codeaudit filescan linkaudit
 
         codeaudit filescan requests
 
-
     Specify an output report file::
 
         codeaudit filescan /path/to/project report.html
 
-    Enable filtering of issues marked with ``#nosec`` or another marker on potential code weaknesses that mitigated or known  ::
+    Enable filtering of issues marked with ``#nosec`` or another marker
+    indicating that potential code weaknesses have been reviewed or
+    intentionally ignored::
 
         codeaudit filescan myexample.py --nosec
 
 POSITIONAL ARGUMENTS
 INPUT_PATH
-    Path to a local Python file or directory, or the name of a package available on PyPI.
-
+    Path to a local Python file or directory, a local or remote ``.tar.gz``
+    archive, or the name of a package available on PyPI.
 
 FLAGS
 -f, --filename=FILENAME
     Default: 'codeaudit-report.html'
--n, --nosec=NOSEC
-    Default: False
-
-
-Args:
+    Name (and optional path) of the HTML file to write the scan report to.
+    The filename should use the ``.html`` extension.
 
--f, --filename=FILENAME
-    Default: 'codeaudit-report.html'
-    Name (and optional path) of the HTML file to write the scan report to. The filename should use the ``.html`` extension. Defaults to ``DEFAULT_OUTPUT_FILE``.
 -n, --nosec=NOSEC
     Default: False
-    Whether to filter out issues marked as reviewed or ignored in the source code. Defaults to ``False``, no filtering.
+    Whether to filter out issues marked as reviewed or ignored in the
+    source code.
 
-    input_path (str): Path to a local Python file or directory, or the name
-        of a package available on PyPI.
+Args:
+    input_path (str): Path to a local Python file or directory, a local or
+        remote ``.tar.gz`` archive, or the name of a package available on
+        PyPI.
     filename (str, optional): Name (and optional path) of the HTML file to
         write the scan report to. The filename should use the ``.html``
         extension. Defaults to ``DEFAULT_OUTPUT_FILE``.
     nosec (bool, optional): Whether to filter out issues marked as reviewed
-        or ignored in the source code. Defaults to ``False``, no filtering.
+        or ignored in the source code. Defaults to ``False``, meaning no
+        filtering is applied.
 
 Returns:
     None: The function writes a static HTML security report to disk.

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/codeauditoverview.md

@@ -2,21 +2,28 @@
 # Command `codeaudit overview`
 
 
+Use this command to generate a quick security-relevant assessment of a Python project or package. It provides an overview of important security and code-complexity metrics for the project.
 
-Use this command to generate a quick security relevant assessment of a Python project or package. It provides an overview of important security metrics for the project.
+## Usage
 
-Usage
-```Bash
-codeaudit overview <package-path|package-name> [report-name.html]
+```bash
+codeaudit overview <package-path|package-name|package.tar.gz> [report-name.html]
 ```
 
-Arguments:
-* `<package-path|package-name>` (Required)
-Specify either a local directory containing Python files or the name of a Python package hosted on PyPI.org.
+## Arguments
+
+* `<package-path|package-name|package.tar.gz>` (Required)
+
+  Specify one of the following:
+
+  * A local directory containing Python files.
+  * The name of a Python package hosted on PyPI.org.
+  * A local `.tar.gz` source archive.
+  * A remote `.tar.gz` source archive URL (only HTTPS allowed!).
 
 * `[report-name.html]` (Optional)
-The filename for the generated security report. If omitted, the tool will use a default filename. If you provide a custom name, ensure it ends with the `.html` extension.
 
+  The filename for the generated overview report. If omitted, the tool will use a default filename. If you provide a custom name, ensure it ends with the `.html` extension.
 
 
 For every Python file the following **security** relevant statistics are determined:

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/examples/ca_api_example_basic.ipynb

@@ -115,7 +115,7 @@
    "id": "98422d63-ec29-49b2-bb4c-3912288cb584",
    "metadata": {},
    "source": [
-    "## Overview of vulnerability of a module\n",
+    "## Security Assessment of Module Vulnerabilities\n",
     "\n",
     "This API retrieves security vulnerability data for external modules via the [OSV (Open Source Vulnerability) Database](https://nocomplexity.com/documents/securityarchitecture/references/vulnerabilitydatabases.html#vulnerability-databases).\n",
     "\n",

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/examples/codeauditchecks.html

@@ -774,4 +774,4 @@ footer {
       <td>Vulnerable to path traversal attacks if used with untrusted archives.</td>
     </tr>
   </tbody>
-</table><br><p>Number of implemented security validations:<b>89</b></p><p>Version of codeaudit: <b>1.8.0</b><p>Because Python and cybersecurity are constantly changing, issue reports <b>SHOULD</b> specify the codeaudit version used.</p><p><b>Disclaimer:</b> <i>This SAST tool <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> provides a powerful, automatic security analysis for Python source code. However, it's not a substitute for human review in combination with business knowledge. Undetected vulnerabilities may still exist.</i></p><p>This Python security report was created on: <b>2026-07-10 14:05</b> with <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> version <b>1.8.0</b></p><hr><footer><div class="footer-links">Check the <a href="https://nocomplexity.com/documents/codeaudit/intro.html" target="_blank">documentation</a> for help on found issues.<br>Codeaudit is made with <span class="heart">&#10084;</span> by cyber security professionals who advocate for <a href="https://nocomplexity.com/simplify-security/" target="_blank">open simple security solutions</a>.<br><a href="https://nocomplexity.com/documents/codeaudit/CONTRIBUTE.html" target="_blank">Join the community</a> and contribute to make this tool better!</div></footer></div></body></html>
+</table><br><p>Number of implemented security validations:<b>89</b></p><p>Version of codeaudit: <b>1.9.0</b><p>Because Python and cybersecurity are constantly changing, issue reports <b>SHOULD</b> specify the codeaudit version used.</p><p><b>Disclaimer:</b> <i>This SAST tool <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> provides a powerful, automatic security analysis for Python source code. However, it's not a substitute for human review in combination with business knowledge. Undetected vulnerabilities may still exist.</i></p><p>This Python security report was created on: <b>2026-08-23 12:20</b> with <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> version <b>1.9.0</b></p><hr><footer><div class="footer-links">Check the <a href="https://nocomplexity.com/documents/codeaudit/intro.html" target="_blank">documentation</a> for help on found issues.<br>Codeaudit is made with <span class="heart">&#10084;</span> by cyber security professionals who advocate for <a href="https://nocomplexity.com/simplify-security/" target="_blank">open simple security solutions</a>.<br><a href="https://nocomplexity.com/documents/codeaudit/CONTRIBUTE.html" target="_blank">Join the community</a> and contribute to make this tool better!</div></footer></div></body></html>

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/examples/demoscan.json

@@ -1,7 +1,7 @@
 {
   "name": "Python_Code_Audit",
-  "version": "1.8.0",
-  "generated_on": "2026-07-10 14:05",
+  "version": "1.9.0",
+  "generated_on": "2026-08-23 12:20",
   "file_security_info": {
     "0": {
       "FileName": "demofile.py",

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/filescan.md

@@ -1,27 +1,30 @@
 # Command `codeaudit filescan`
 
-The **Python Code Audit** `filescan` command efficiently scans Python files or directories (packages) to:
-1. Identify and report potential security weaknesses and
-2. [Detect Data Exfiltration](data_exfiltration_detection)
+The **Python Code Audit** `filescan` command efficiently scans Python files, directories, or source packages to:
 
-The tool generates a report detailing discovered security issues and flagging any External Egress Risks identified within the Python code.
+1. Identify and report potential security weaknesses.
+2. [Detect Data Exfiltration](data_exfiltration_detection.md).
 
-See section [validations](checksinformation) for all security checks implemented!
+The tool generates a report detailing discovered security issues and flagging any **External Egress Risks** identified within the Python code.
 
+See the section on [validations](checksinformation.md) for an overview of all implemented security checks.
 
-To use the `codescan filescan` feature type in the console:
+To use the `filescan` feature, run the following command in the console:
 
+```text
+codeaudit filescan <pythonfile|package-name|directory|package.tar.gz> [OUTPUTFILE]
 ```
-codeaudit filescan <pythonfile|package-name|directory>  [OUTPUTFILE]
-```
 
-**Python Code Audit** will create a detailed security scan report based on a single Python file, a local directory or a package on PyPI.org
+The `<package.tar.gz>` input can be either a **local** `.tar.gz` source archive or a **remote** `.tar.gz` archive URL.
+
+**Python Code Audit** will create a detailed security scan report for any of the following:
 
+* A single local Python file.
+* A local directory containing Python source code.
+* A package hosted on [PyPI.org](http://PyPI.org).
+* A local `.tar.gz` source package.
+* A remote `.tar.gz` source package.
 
-So the input for `codeaudit filescan`  can be:
-* A single Python file;
-* A package on PyPI.org: Python Code Audit checks this package on security weakness, so cloning the sources local is not needed!
-* A local directory with Python files, e.g. a local package development environment or a cloned package.
 
 If you do not specify [OUTPUTFILE], a HTML output file, a HTML report file is created in the current directory and will be named codeaudit-report.html.
 

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/installation.md

@@ -12,7 +12,11 @@ Launch web-based version
 ```
 
 :::{note} 
-The browser-based version runs 100% locally; however, please note that not all functionality is available. You can perform a security scan on packages available from PyPI. 
+The browser-based version runs 100% locally in your browser.
+No data is ever sent to a server. No analytics. No telemetry.
+
+Please note that not all functionality is available. You can perform a security scan on packages available from PyPI. 
+
 :::
 
 ## Install for full functionality

{codeaudit-1.8.0 → codeaudit-1.9.0}/docs/intro.md

@@ -10,6 +10,23 @@
 
 **Python Code Audit** is a Static Application **Security** Testing (SAST) tool used to find **security weaknesses** in Python code.
 
+::::{grid} 
+:gutter: 3 
+
+:::{grid-item-card}
+{octicon}`rocket;4em;caption-text` **Launch Web version**
+
+Audit Python packages instantly. No install required. Perfect for scanning PyPI packages before you use them. Runs entirely in your browser. Zero data sent to servers. No analytics. No telemetry. Ever.
+
++++
+
+```{button-link} https://nocomplexity.com/codeauditapp/dashboardapp.html
+:color: danger
+:align: center
+Launch 
+```
+:::
+::::
 
 ::::{grid} 2
 :class-container: text-center

{codeaudit-1.8.0 → codeaudit-1.9.0}/pyproject.toml

@@ -7,8 +7,8 @@ name = "codeaudit"
 dynamic = ["version"] # This tells Hatch that version is dynamically determined
 description = 'A modern Python security source code analyzer (SAST) based on distrust.'
 readme = "README.md"
-dependencies = ["fire==0.7.1","pandas>=2.3","altair==6.0.0"]
-requires-python = ">=3.11"
+dependencies = ["fire==0.7.1","pandas>=2.3","altair==6.0.0","fileaudit"]
+requires-python = ">=3.12"
 license = "GPL-3.0-or-later"
 keywords = ["SAST", "Python SAST", "SAST API", "Complexity Checker"]
 authors = [
@@ -19,10 +19,9 @@ classifiers = [
   "Intended Audience :: Developers",
   "Intended Audience :: Science/Research",
   "Topic :: Security",
-  "Topic :: Software Development :: Quality Assurance",
-  "Development Status :: 4 - Beta",
-  "Programming Language :: Python",
-  "Programming Language :: Python :: 3.11",
+  "Topic :: Software Development :: Quality Assurance",  
+  "Development Status :: 5 - Production/Stable",
+  "Programming Language :: Python",  
   "Programming Language :: Python :: 3.12",
   "Programming Language :: Python :: 3.13",
   "Programming Language :: Python :: 3.14",
@@ -58,7 +57,7 @@ extra-dependencies = [
 check = "mypy --install-types --non-interactive {args:src/codeaudit tests}"
 
 [[tool.hatch.envs.hatch-test.matrix]]
-python = ["3.14", "3.13", "3.12", "3.11"]
+python = ["3.14", "3.13", "3.12"]
 
 [tool.hatch.envs.hatch-test]
 randomize = true

{codeaudit-1.8.0 → codeaudit-1.9.0}/src/codeaudit/__about__.py

@@ -1,4 +1,4 @@
 # SPDX-FileCopyrightText: 2025-present Maikel Mardjan
 #
 # SPDX-License-Identifier: GPL-3.0-or-later
-__version__ = "1.8.0"
+__version__ = "1.9.0"

{codeaudit-1.8.0 → codeaudit-1.9.0}/src/codeaudit/api_helpers.py

@@ -12,7 +12,12 @@ You should have received a copy of the GNU General Public License along with thi
 Function to create nice APIs. So API helper functions.
 """
 
-from codeaudit.api_interfaces import get_modules, get_overview, _build_weakness_details
+from codeaudit.api_interfaces import (
+    get_modules,
+    get_overview,
+    _build_weakness_details,
+    package_imports,
+)
 from codeaudit.checkmodules import get_all_modules
 from codeaudit.filehelpfunctions import (
     collect_python_source_files,
@@ -77,6 +82,7 @@ def _codeaudit_directory_scan_wasm(input_path, nosec_flag):
         "statistics_overview": package_overview,
         "module_overview": modules_discovered,
     }
+
     # File scanning
     for i, file in enumerate(files_to_check):
         try: