codeaudit 1.8.1__tar.gz → 1.9.0__tar.gz

codeaudit-1.9.0/.github/workflows/python-test.yml

@@ -0,0 +1,31 @@
+name: Python Package Test
+
+on:
+  push:
+    paths:
+      - 'src/**'
+      - 'tests/**'
+  pull_request:
+    paths:
+      - 'src/**'
+      - 'tests/**'
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:      
+      - uses: actions/checkout@v5
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v6        
+        with:
+          python-version: 3.14
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip hatch
+
+      - name: Test with hatch
+        run: |
+          hatch test -acr

codeaudit-1.9.0/.github/workflows/sast_validation.yml

@@ -0,0 +1,45 @@
+# SAST scan with Python Code Audit on GitHub Actions 
+# Uses the development version!! So make sure it always works -)
+
+name: Python Code Audit SAST Scan
+
+on:
+  push:
+    paths:
+      - 'src/**'
+  pull_request:
+    paths:
+      - 'src/**'
+
+jobs:
+  codeaudit-scan:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.14"
+
+      - name: Upgrade pip
+        run: python -m pip install --upgrade pip
+
+      - name: Install Python Code Audit
+        run: python -m pip install -e .
+
+      - name: Show version
+        run: codeaudit --version
+
+      - name: Run SAST scan
+        run: |
+          codeaudit cimode . --output text | tee codeaudit-output.text
+          exit ${PIPESTATUS[0]}
+
+      - name: Upload scan artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: codeaudit-${{ github.ref_name }}
+          path: codeaudit-output.text

{codeaudit-1.8.1 → codeaudit-1.9.0}/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Change Log
 
+## Version 1.9.0:
+
+**Added**
+
+* Support for scanning local and remote `.tar.gz` files using the `filescan` API function, simplifying package scanning before PyPI publication (available via `codeaudit filescan` and `codeaudit overview` CLI commands).
+* Added `"test"` to the default collection of excluded scan directories.
+
+**Changed**
+
+* Improved the `filescan` API function.
+* Dropped active installation support for Python versions older than 3.12 (code analysis support for older Python versions remains available).
+* Updated GitHub Actions to use Node.js 24.
+* Optimized the GitHub testing workflow to ignore documentation-only changes.
+
+
+**Documentation**
+
+* Updated and improved unit tests to reflect current functionality and test coverage.
+
+
 ## Version 1.8.1:
 
 **Added**

{codeaudit-1.8.1 → codeaudit-1.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codeaudit
-Version: 1.8.1
+Version: 1.9.0
 Summary: A modern Python security source code analyzer (SAST) based on distrust.
 Project-URL: Homepage, https://codeaudit.nocomplexity.com
 Project-URL: Documentation, https://github.com/nocomplexity/codeaudit#readme
@@ -15,14 +15,14 @@ Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: Science/Research
 Classifier: Programming Language :: Python
-Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Security
 Classifier: Topic :: Software Development :: Quality Assurance
-Requires-Python: >=3.11
+Requires-Python: >=3.12
 Requires-Dist: altair==6.0.0
+Requires-Dist: fileaudit
 Requires-Dist: fire==0.7.1
 Requires-Dist: pandas>=2.3
 Provides-Extra: test

{codeaudit-1.8.1 → codeaudit-1.9.0}/SECURITY.md

@@ -20,7 +20,7 @@ I will send a response indicating the next steps in handling your report. After
 
 
 > [!TIP]
-> To learn more about security, please visit [Simplify Cyber Security](https://nocomplexity.com/simplify-security/). And do not hestite to join-in to make these Free and Open Security Playbooks better!
+> To learn more about security, please visit [Simplify Cyber Security](https://nocomplexity.com/simplify-security/). And do not hesitate to join-in to make these Free and Open Security Playbooks better!
 
 
 

{codeaudit-1.8.1 → codeaudit-1.9.0}/docs/cimode.md

@@ -198,12 +198,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
-          python-version: "3.13"
+          python-version: "3.14"
 
       - name: Upgrade pip
         run: python -m pip install --upgrade pip
@@ -220,7 +220,7 @@ jobs:
           exit ${PIPESTATUS[0]}
 
       - name: Upload scan artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: codeaudit-${{ github.ref_name }}
           path: codeaudit-output.text
@@ -243,10 +243,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
@@ -263,7 +263,7 @@ jobs:
         run: codeaudit cimode . --output html > codeaudit-output.html
 
       - name: Upload scan artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: codeaudit-${{ github.ref_name }}
           path: codeaudit-output.html

{codeaudit-1.8.1 → codeaudit-1.9.0}/docs/codeauditcommands.md

@@ -1,6 +1,6 @@
 % THIS FILE IS GENERATED! - Use CLIcommands.ipynb to make it better!
 # Commands Overview
-Python Code Audit commands for: version: 1.8.1
+Python Code Audit commands for: version: 1.9.0
 ```
 ----------------------------------------------------
  _                    __             _
@@ -16,8 +16,8 @@ Usage: codeaudit COMMAND <directory|package>  [report.html]
 Depending on the command, you must specify a local directory, a Python file, or a package name hosted on PyPI.org.Reporting: The results are generated as a static HTML report for viewing in a web browser.
 
 Commands:
-  overview             Generates an overview report of code complexity and security indicators.
-  filescan             Scans Python source code or PyPI packages for security weaknesses.
+  overview             Generate an overview report of code complexity and security indicators.
+  filescan             Scan Python source code, PyPI packages, or tar.gz archives for security weaknesses.
   cimode               Run a SAST scan for CI workflows.
   modulescan           Generate a report on known vulnerabilities in Python modules and packages.
   checks               Creates an HTML report of all implemented security checks.
@@ -28,50 +28,76 @@ Use the Python Code Audit documentation (https://codeaudit.nocomplexity.com) to
 ```
 ## codeaudit overview
 ```text
-Generates an overview report of code complexity and security indicators.
+Generate an overview report of code complexity and security indicators.
 
-This function analyzes a Python project to produce a high-level overview of
-complexity and security-related metrics. The input may be either:
+This function analyzes a Python project and generates a high-level HTML
+overview of code complexity, project size, module dependencies, and
+security-related indicators.
 
-- A local directory containing Python source files
-- The name of a package hosted on PyPI.org
+The input can be one of the following:
 
-So:
-codeaudit overview <package-name|directory> [reportname.html]
+* A local directory containing Python source files
+* A local or remote ``.tar.gz`` source archive
+* The name of a package hosted on PyPI.org
 
-For PyPI packages, the source distribution (sdist) is downloaded,
+codeaudit overview <package-name|directory|archive.tar.gz> [reportname.html]
+
+For a local or remote ``.tar.gz`` archive, the archive is validated,
+extracted to a temporary directory, scanned, and removed after the report
+has been generated.
+
+For a PyPI package, the source distribution (sdist) is downloaded,
 extracted to a temporary directory, scanned, and removed after the report
-is generated.
+has been generated.
+
+The report includes:
 
-The report includes summary statistics, security risk indicators based on
-complexity and total lines of code, a list of discovered modules, per-file
-metrics, and a visual overview. Results are written to a static HTML file.
+* Summary statistics for the analyzed project
+* Security concern indicators based on maximum code complexity
+  and total lines of code
+* A list of discovered standard-library and external modules
+* Detailed metrics for each Python source file
+* A visual overview of the collected metrics
+* Advice for performing a full SAST scan with ``codeaudit filescan``
 
 Examples:
     Generate an overview report for a local project directory::
 
         codeaudit overview /projects/mycolleaguesproject
 
+    Generate an overview report for a local ``.tar.gz`` archive::
+
+        codeaudit overview /path/to/myproject.tar.gz
+
+    Generate an overview report for a remote ``.tar.gz`` archive::
+
+        codeaudit overview https://example.com/myproject.tar.gz
+
     Generate an overview report for a PyPI package::
 
-        codeaudit overview linkaudit #A nice project on PyPI.org
+        codeaudit overview linkaudit
 
-        codeaudit overview pydantic  #A complex project on PyPI.org from a security perspective?
+        codeaudit overview pydantic
+
+    Specify an output report file::
+
+        codeaudit overview /projects/mycolleaguesproject report.html
 
 Args:
-    directory (str): Path to a local directory containing Python source files
-        or the name of a package available on PyPI.org.
+    directory (str): Path to a local directory containing Python source
+        files, a local or remote ``.tar.gz`` source archive, or the name of
+        a package available on PyPI.org.
     filename (str, optional): Name (and optional path) of the HTML file to
-        write the overview report to. The filename should use the ``.html``
-        extension. Defaults to ``DEFAULT_OUTPUT_FILE``.
+        write the overview report to. The filename should use the
+        ``.html`` extension. Defaults to ``DEFAULT_OUTPUT_FILE``.
 
 Returns:
-    None. The function writes a static HTML overview report to disk.
+    None: The function writes a static HTML overview report to disk.
 
 Raises:
-    SystemExit: If the provided path is not a directory, contains no Python
-        files, or is neither a valid local directory nor a valid PyPI
-        package name.
+    SystemExit: If the provided path is not a directory, contains no
+        Python files, is an invalid ``.tar.gz`` archive, or is neither a
+        valid local input nor a valid PyPI package name.
 str(object='') -> str
 str(bytes_or_buffer[, encoding[, errors]]) -> str
 
@@ -133,26 +159,32 @@ errors defaults to 'strict'.
 ```
 ## codeaudit filescan
 ```text
-Scans Python source code or PyPI packages for security weaknesses.
+Scan Python source code, PyPI packages, or tar.gz archives for security weaknesses.
+
 This function performs static application security testing (SAST) on a
 specified input. The input can be one of the following:
 
 * A local directory containing Python source code
 * A single local Python file
+* A local or remote ``.tar.gz`` source archive
 * The name of a package hosted on PyPI
 
-codeaudit filescan <pythonfile|package-name|directory> [reportname.html] [--nosec]
+codeaudit filescan <pythonfile|package-name|directory|archive.tar.gz> [reportname.html] [--nosec]
 
 Based on the input type, the function analyzes the source code for potential
 security issues, generates an HTML report summarizing the findings, and
 writes the report to disk.
 
+For a local or remote ``.tar.gz`` archive, the archive is validated,
+extracted to a temporary directory, scanned as a source directory, and
+cleaned up after the scan completes.
+
 If a PyPI package name is provided, the function downloads the source
 distribution (sdist), extracts it to a temporary directory, scans the
 extracted source code, and cleans up all temporary files after the scan
 completes.
 
- Examples:
+Examples:
 
     Scan a local directory and write the report to ``report.html``::
 
@@ -166,49 +198,56 @@ completes.
 
         codeaudit filescan myexample.py
 
+    Scan a local tar.gz archive::
+
+        codeaudit filescan /path/to/package.tar.gz
+
+    Scan a remote tar.gz archive::
+
+        codeaudit filescan https://example.com/package.tar.gz
+
     Scan a package hosted on PyPI::
 
         codeaudit filescan linkaudit
 
         codeaudit filescan requests
 
-
     Specify an output report file::
 
         codeaudit filescan /path/to/project report.html
 
-    Enable filtering of issues marked with ``#nosec`` or another marker on potential code weaknesses that mitigated or known  ::
+    Enable filtering of issues marked with ``#nosec`` or another marker
+    indicating that potential code weaknesses have been reviewed or
+    intentionally ignored::
 
         codeaudit filescan myexample.py --nosec
 
 POSITIONAL ARGUMENTS
 INPUT_PATH
-    Path to a local Python file or directory, or the name of a package available on PyPI.
-
+    Path to a local Python file or directory, a local or remote ``.tar.gz``
+    archive, or the name of a package available on PyPI.
 
 FLAGS
 -f, --filename=FILENAME
     Default: 'codeaudit-report.html'
--n, --nosec=NOSEC
-    Default: False
-
-
-Args:
+    Name (and optional path) of the HTML file to write the scan report to.
+    The filename should use the ``.html`` extension.
 
--f, --filename=FILENAME
-    Default: 'codeaudit-report.html'
-    Name (and optional path) of the HTML file to write the scan report to. The filename should use the ``.html`` extension. Defaults to ``DEFAULT_OUTPUT_FILE``.
 -n, --nosec=NOSEC
     Default: False
-    Whether to filter out issues marked as reviewed or ignored in the source code. Defaults to ``False``, no filtering.
+    Whether to filter out issues marked as reviewed or ignored in the
+    source code.
 
-    input_path (str): Path to a local Python file or directory, or the name
-        of a package available on PyPI.
+Args:
+    input_path (str): Path to a local Python file or directory, a local or
+        remote ``.tar.gz`` archive, or the name of a package available on
+        PyPI.
     filename (str, optional): Name (and optional path) of the HTML file to
         write the scan report to. The filename should use the ``.html``
         extension. Defaults to ``DEFAULT_OUTPUT_FILE``.
     nosec (bool, optional): Whether to filter out issues marked as reviewed
-        or ignored in the source code. Defaults to ``False``, no filtering.
+        or ignored in the source code. Defaults to ``False``, meaning no
+        filtering is applied.
 
 Returns:
     None: The function writes a static HTML security report to disk.

{codeaudit-1.8.1 → codeaudit-1.9.0}/docs/codeauditoverview.md

@@ -2,21 +2,28 @@
 # Command `codeaudit overview`
 
 
+Use this command to generate a quick security-relevant assessment of a Python project or package. It provides an overview of important security and code-complexity metrics for the project.
 
-Use this command to generate a quick security relevant assessment of a Python project or package. It provides an overview of important security metrics for the project.
+## Usage
 
-Usage
-```Bash
-codeaudit overview <package-path|package-name> [report-name.html]
+```bash
+codeaudit overview <package-path|package-name|package.tar.gz> [report-name.html]
 ```
 
-Arguments:
-* `<package-path|package-name>` (Required)
-Specify either a local directory containing Python files or the name of a Python package hosted on PyPI.org.
+## Arguments
+
+* `<package-path|package-name|package.tar.gz>` (Required)
+
+  Specify one of the following:
+
+  * A local directory containing Python files.
+  * The name of a Python package hosted on PyPI.org.
+  * A local `.tar.gz` source archive.
+  * A remote `.tar.gz` source archive URL (only HTTPS allowed!).
 
 * `[report-name.html]` (Optional)
-The filename for the generated security report. If omitted, the tool will use a default filename. If you provide a custom name, ensure it ends with the `.html` extension.
 
+  The filename for the generated overview report. If omitted, the tool will use a default filename. If you provide a custom name, ensure it ends with the `.html` extension.
 
 
 For every Python file the following **security** relevant statistics are determined:

{codeaudit-1.8.1 → codeaudit-1.9.0}/docs/examples/codeauditchecks.html

@@ -774,4 +774,4 @@ footer {
       <td>Vulnerable to path traversal attacks if used with untrusted archives.</td>
     </tr>
   </tbody>
-</table><br><p>Number of implemented security validations:<b>89</b></p><p>Version of codeaudit: <b>1.8.1</b><p>Because Python and cybersecurity are constantly changing, issue reports <b>SHOULD</b> specify the codeaudit version used.</p><p><b>Disclaimer:</b> <i>This SAST tool <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> provides a powerful, automatic security analysis for Python source code. However, it's not a substitute for human review in combination with business knowledge. Undetected vulnerabilities may still exist.</i></p><p>This Python security report was created on: <b>2026-07-31 13:23</b> with <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> version <b>1.8.1</b></p><hr><footer><div class="footer-links">Check the <a href="https://nocomplexity.com/documents/codeaudit/intro.html" target="_blank">documentation</a> for help on found issues.<br>Codeaudit is made with <span class="heart">&#10084;</span> by cyber security professionals who advocate for <a href="https://nocomplexity.com/simplify-security/" target="_blank">open simple security solutions</a>.<br><a href="https://nocomplexity.com/documents/codeaudit/CONTRIBUTE.html" target="_blank">Join the community</a> and contribute to make this tool better!</div></footer></div></body></html>
+</table><br><p>Number of implemented security validations:<b>89</b></p><p>Version of codeaudit: <b>1.9.0</b><p>Because Python and cybersecurity are constantly changing, issue reports <b>SHOULD</b> specify the codeaudit version used.</p><p><b>Disclaimer:</b> <i>This SAST tool <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> provides a powerful, automatic security analysis for Python source code. However, it's not a substitute for human review in combination with business knowledge. Undetected vulnerabilities may still exist.</i></p><p>This Python security report was created on: <b>2026-08-23 12:20</b> with <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> version <b>1.9.0</b></p><hr><footer><div class="footer-links">Check the <a href="https://nocomplexity.com/documents/codeaudit/intro.html" target="_blank">documentation</a> for help on found issues.<br>Codeaudit is made with <span class="heart">&#10084;</span> by cyber security professionals who advocate for <a href="https://nocomplexity.com/simplify-security/" target="_blank">open simple security solutions</a>.<br><a href="https://nocomplexity.com/documents/codeaudit/CONTRIBUTE.html" target="_blank">Join the community</a> and contribute to make this tool better!</div></footer></div></body></html>

{codeaudit-1.8.1 → codeaudit-1.9.0}/docs/examples/demoscan.json

@@ -1,7 +1,7 @@
 {
   "name": "Python_Code_Audit",
-  "version": "1.8.1",
-  "generated_on": "2026-07-31 13:23",
+  "version": "1.9.0",
+  "generated_on": "2026-08-23 12:20",
   "file_security_info": {
     "0": {
       "FileName": "demofile.py",

{codeaudit-1.8.1 → codeaudit-1.9.0}/docs/filescan.md

@@ -1,27 +1,30 @@
 # Command `codeaudit filescan`
 
-The **Python Code Audit** `filescan` command efficiently scans Python files or directories (packages) to:
-1. Identify and report potential security weaknesses and
-2. [Detect Data Exfiltration](data_exfiltration_detection)
+The **Python Code Audit** `filescan` command efficiently scans Python files, directories, or source packages to:
 
-The tool generates a report detailing discovered security issues and flagging any External Egress Risks identified within the Python code.
+1. Identify and report potential security weaknesses.
+2. [Detect Data Exfiltration](data_exfiltration_detection.md).
 
-See section [validations](checksinformation) for all security checks implemented!
+The tool generates a report detailing discovered security issues and flagging any **External Egress Risks** identified within the Python code.
 
+See the section on [validations](checksinformation.md) for an overview of all implemented security checks.
 
-To use the `codescan filescan` feature type in the console:
+To use the `filescan` feature, run the following command in the console:
 
+```text
+codeaudit filescan <pythonfile|package-name|directory|package.tar.gz> [OUTPUTFILE]
 ```
-codeaudit filescan <pythonfile|package-name|directory>  [OUTPUTFILE]
-```
 
-**Python Code Audit** will create a detailed security scan report based on a single Python file, a local directory or a package on PyPI.org
+The `<package.tar.gz>` input can be either a **local** `.tar.gz` source archive or a **remote** `.tar.gz` archive URL.
+
+**Python Code Audit** will create a detailed security scan report for any of the following:
 
+* A single local Python file.
+* A local directory containing Python source code.
+* A package hosted on [PyPI.org](http://PyPI.org).
+* A local `.tar.gz` source package.
+* A remote `.tar.gz` source package.
 
-So the input for `codeaudit filescan`  can be:
-* A single Python file;
-* A package on PyPI.org: Python Code Audit checks this package on security weakness, so cloning the sources local is not needed!
-* A local directory with Python files, e.g. a local package development environment or a cloned package.
 
 If you do not specify [OUTPUTFILE], a HTML output file, a HTML report file is created in the current directory and will be named codeaudit-report.html.
 

{codeaudit-1.8.1 → codeaudit-1.9.0}/pyproject.toml

@@ -7,8 +7,8 @@ name = "codeaudit"
 dynamic = ["version"] # This tells Hatch that version is dynamically determined
 description = 'A modern Python security source code analyzer (SAST) based on distrust.'
 readme = "README.md"
-dependencies = ["fire==0.7.1","pandas>=2.3","altair==6.0.0"]
-requires-python = ">=3.11"
+dependencies = ["fire==0.7.1","pandas>=2.3","altair==6.0.0","fileaudit"]
+requires-python = ">=3.12"
 license = "GPL-3.0-or-later"
 keywords = ["SAST", "Python SAST", "SAST API", "Complexity Checker"]
 authors = [
@@ -21,8 +21,7 @@ classifiers = [
   "Topic :: Security",
   "Topic :: Software Development :: Quality Assurance",  
   "Development Status :: 5 - Production/Stable",
-  "Programming Language :: Python",
-  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python",  
   "Programming Language :: Python :: 3.12",
   "Programming Language :: Python :: 3.13",
   "Programming Language :: Python :: 3.14",
@@ -58,7 +57,7 @@ extra-dependencies = [
 check = "mypy --install-types --non-interactive {args:src/codeaudit tests}"
 
 [[tool.hatch.envs.hatch-test.matrix]]
-python = ["3.14", "3.13", "3.12", "3.11"]
+python = ["3.14", "3.13", "3.12"]
 
 [tool.hatch.envs.hatch-test]
 randomize = true

{codeaudit-1.8.1 → codeaudit-1.9.0}/src/codeaudit/__about__.py

@@ -1,4 +1,4 @@
 # SPDX-FileCopyrightText: 2025-present Maikel Mardjan
 #
 # SPDX-License-Identifier: GPL-3.0-or-later
-__version__ = "1.8.1"
+__version__ = "1.9.0"

{codeaudit-1.8.1 → codeaudit-1.9.0}/src/codeaudit/api_interfaces.py

@@ -41,7 +41,14 @@ from codeaudit.filehelpfunctions import (
     is_ast_parsable,
 )
 from codeaudit.privacy_lint import data_egress_scan
-from codeaudit.pypi_package_scan import get_package_source, get_pypi_download_info
+from codeaudit.pypi_package_scan import (
+    get_package_source,
+    get_pypi_download_info,
+    get_latest_release_date,
+    days_since_update,
+    is_valid_tar_gz,
+    get_targz_package_source,
+)
 from codeaudit.security_checks import ast_security_checks, perform_validations
 from codeaudit.suppression import filter_sast_results
 from codeaudit.totals import (
@@ -51,6 +58,8 @@ from codeaudit.totals import (
     total_modules,
 )
 
+SCAN_ERROR = "Invalid input: not a *.py file or directory with Python files, invalid/missing .tar.gz on given location, or package not found on PyPI."
+
 
 def version():
     """Returns the version of Python Code Audit - WASM safe"""
@@ -70,6 +79,7 @@ def filescan(input_path, nosec=False):
       directory.
     - **Single Python file**: Scans the file if it exists and can be parsed
       into an AST.
+    - **Local or remote** `tar.gz` archive, e.g. on a remote repository, E.g. to scan apps are on not (yet)PyPI
     - **PyPI package** on PyPI.org: Downloads the
       source distribution from PyPI, scans it, and cleans up temporary files.
 
@@ -84,7 +94,7 @@ def filescan(input_path, nosec=False):
     - `/docs`
     - `/docker`
     - `/dist`
-    - `/tests`
+    - `/test[s]`
     - all directories that start with . (dot) or _ (underscore)
 
     But you can easily change this if needed!
@@ -143,15 +153,41 @@ def filescan(input_path, nosec=False):
         )  # there is only 1 file , so index 0 equals as for package to make functionality that use the output that works on the dict or json can equal for a package or a single file!
         output |= {"file_security_info": file_output}
         return output
+    elif is_valid_tar_gz(input_path):
+        src_dir, tmp_handle = get_targz_package_source(input_path)
+        try:
+            package_name = get_filename_from_path(input_path)
+            output |= {"package_name": package_name}
+            scan_output = _codeaudit_directory_scan(src_dir, nosec_flag=nosec)
+            output |= scan_output
+            # Replace the value of "imported_modules" in the nested dict
+            correct_imported_modules = package_imports(output)
+            output["module_overview"]["imported_modules"] = correct_imported_modules
+            # correct statistics for modules count in a package
+            output["statistics_overview"]["External Modules"] = len(
+                correct_imported_modules
+            )
+        finally:
+            # Cleaning up temp directory
+            tmp_handle.cleanup()  # deletes everything from temp directory
+        return output
+
     elif pypi_data := get_pypi_download_info(input_path):
         package_name = (
             input_path  # The variable input_path is now equal to the package name
         )
         url = pypi_data["download_url"]
         release = pypi_data["release"]
+        update_date = get_latest_release_date(package_name)
+        days_since_last_update = days_since_update(update_date)
         if url is not None:
             src_dir, tmp_handle = get_package_source(url)
-            output |= {"package_name": package_name, "package_release": release}
+            output |= {
+                "package_name": package_name,
+                "package_release": release,
+                "update_date": update_date.isoformat(),
+                "days_since_last_update": days_since_last_update,
+            }
             try:
                 scan_output = _codeaudit_directory_scan(src_dir, nosec_flag=nosec)
                 output |= scan_output
@@ -166,11 +202,10 @@ def filescan(input_path, nosec=False):
                 # Cleaning up temp directory
                 tmp_handle.cleanup()  # deletes everything from temp directory
             return output
+
     else:
         # Its not a directory nor a valid Python file:
-        return {
-            "Error": "File is not a *.py file, does not exist or is not a valid directory path towards a Python package."
-        }
+        return {"Error": SCAN_ERROR}
 
 
 def _codeaudit_scan(filename, nosec_flag):