codeaudit 1.9.1__tar.gz → 1.9.3__tar.gz

{codeaudit-1.9.1 → codeaudit-1.9.3}/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Change Log
 
+## Version 1.9.3:
+
+**Changed**
+
+* Updated functions `weaknesses_overview` and `total_weaknesses`.
+
+**Fixed**
+
+* Fixed issue in API function `get_weakness_counts` and included extra tests.
+* Corrected severity for the `input` function.
+
+**Documentation**
+* Validated and documented correct working and compatibility for Python 3.15.
+
+
+
+## Version 1.9.2:
+
+* Fixed issue for API scan
+
 ## Version 1.9.1:
 
 **Added**

{codeaudit-1.9.1 → codeaudit-1.9.3}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: codeaudit
-Version: 1.9.1
+Version: 1.9.3
 Summary: A modern Python security source code analyzer (SAST) based on distrust.
 Project-URL: Homepage, https://codeaudit.nocomplexity.com
 Project-URL: Documentation, https://github.com/nocomplexity/codeaudit#readme
@@ -18,6 +18,7 @@ Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Classifier: Topic :: Security
 Classifier: Topic :: Software Development :: Quality Assurance
 Requires-Python: >=3.12

{codeaudit-1.9.1 → codeaudit-1.9.3}/docs/codeauditcommands.md

@@ -1,6 +1,6 @@
 % THIS FILE IS GENERATED! - Use CLIcommands.ipynb to make it better!
 # Commands Overview
-Python Code Audit commands for: version: 1.9.1
+Python Code Audit commands for: version: 1.9.3
 ```
 ----------------------------------------------------
  _                    __             _

{codeaudit-1.9.1 → codeaudit-1.9.3}/docs/examples/ca_api_example_scanning.ipynb

@@ -33,7 +33,15 @@
    "execution_count": 3,
    "id": "bbcc805d-0f4d-49fc-a0f5-3ad863fe6da8",
    "metadata": {},
-   "outputs": [],
+   "outputs": [
+    {
+     "name": "stdout",
+     "output_type": "stream",
+     "text": [
+      "Exception: FileAudit Security Validation Failed - Only .py files are accepted (got extension ''): linkaudit\n"
+     ]
+    }
+   ],
    "source": [
     "result = filescan(packagename)  # linkaudit is a package that is present on PyPI.org"
    ]
@@ -48,18 +56,20 @@
      "data": {
       "text/plain": [
        "{'name': 'Python_Code_Audit',\n",
-       " 'version': '1.6.2',\n",
-       " 'generated_on': '2026-04-10 16:09',\n",
+       " 'version': '1.9.1',\n",
+       " 'generated_on': '2026-10-09 19:26',\n",
        " 'package_name': 'linkaudit',\n",
-       " 'package_release': '0.9.8',\n",
+       " 'package_release': '0.9.10',\n",
+       " 'update_date': '2026-10-08',\n",
+       " 'days_since_last_update': 1,\n",
        " 'statistics_overview': {'Number_Of_Files': 6,\n",
-       "  'Number_Of_Lines': 523,\n",
-       "  'AST_Nodes': 225,\n",
+       "  'Number_Of_Lines': 527,\n",
+       "  'AST_Nodes': 222,\n",
        "  'Core Modules': 6,\n",
-       "  'External Modules': 3,\n",
+       "  'External Modules': 1,\n",
        "  'Functions': 16,\n",
        "  'Classes': 0,\n",
-       "  'Comment_Lines': 194,\n",
+       "  'Comment_Lines': 189,\n",
        "  'Median_Complexity': 9.3,\n",
        "  'Maximum_Complexity': 26},\n",
        " 'module_overview': {'core_modules': ['asyncio',\n",
@@ -68,9 +78,9 @@
        "   'sys',\n",
        "   'urllib.error',\n",
        "   'urllib.request'],\n",
-       "  'imported_modules': ['_version', 'fire', 'linkaudit']},\n",
+       "  'imported_modules': ['fire']},\n",
        " 'file_security_info': {0: {'FileName': '__init__.py',\n",
-       "   'FilePath': '/tmp/codeaudit_sviyoehh/linkaudit-0.9.8/src/linkaudit/__init__.py',\n",
+       "   'FilePath': '/tmp/codeaudit_aftxsa3p/linkaudit-0.9.10/src/linkaudit/__init__.py',\n",
        "   'Number_Of_Lines': 10,\n",
        "   'AST_Nodes': 2,\n",
        "   'Std-Modules': 0,\n",
@@ -85,14 +95,14 @@
        "   'file_name': '__init__.py',\n",
        "   'sast_result': {}},\n",
        "  1: {'FileName': 'html_result.py',\n",
-       "   'FilePath': '/tmp/codeaudit_sviyoehh/linkaudit-0.9.8/src/linkaudit/html_result.py',\n",
-       "   'Number_Of_Lines': 83,\n",
-       "   'AST_Nodes': 28,\n",
+       "   'FilePath': '/tmp/codeaudit_aftxsa3p/linkaudit-0.9.10/src/linkaudit/html_result.py',\n",
+       "   'Number_Of_Lines': 84,\n",
+       "   'AST_Nodes': 29,\n",
        "   'Std-Modules': 1,\n",
        "   'External-Modules': 0,\n",
        "   'Functions': 2,\n",
        "   'Classes': 0,\n",
-       "   'Comment_Lines': 46,\n",
+       "   'Comment_Lines': 50,\n",
        "   'Complexity_Score': 6,\n",
        "   'warnings': 0,\n",
        "   'core_modules': ['os'],\n",
@@ -100,14 +110,14 @@
        "   'file_name': 'html_result.py',\n",
        "   'sast_result': {}},\n",
        "  2: {'FileName': 'markdownhelpers.py',\n",
-       "   'FilePath': '/tmp/codeaudit_sviyoehh/linkaudit-0.9.8/src/linkaudit/markdownhelpers.py',\n",
-       "   'Number_Of_Lines': 128,\n",
+       "   'FilePath': '/tmp/codeaudit_aftxsa3p/linkaudit-0.9.10/src/linkaudit/markdownhelpers.py',\n",
+       "   'Number_Of_Lines': 129,\n",
        "   'AST_Nodes': 50,\n",
        "   'Std-Modules': 2,\n",
        "   'External-Modules': 0,\n",
        "   'Functions': 4,\n",
        "   'Classes': 0,\n",
-       "   'Comment_Lines': 37,\n",
+       "   'Comment_Lines': 38,\n",
        "   'Complexity_Score': 20,\n",
        "   'warnings': 0,\n",
        "   'core_modules': ['os', 're'],\n",
@@ -115,26 +125,22 @@
        "   'file_name': 'markdownhelpers.py',\n",
        "   'sast_result': {}},\n",
        "  3: {'FileName': 'linkaudit.py',\n",
-       "   'FilePath': '/tmp/codeaudit_sviyoehh/linkaudit-0.9.8/src/linkaudit/linkaudit.py',\n",
-       "   'Number_Of_Lines': 271,\n",
-       "   'AST_Nodes': 135,\n",
+       "   'FilePath': '/tmp/codeaudit_aftxsa3p/linkaudit-0.9.10/src/linkaudit/linkaudit.py',\n",
+       "   'Number_Of_Lines': 273,\n",
+       "   'AST_Nodes': 131,\n",
        "   'Std-Modules': 5,\n",
        "   'External-Modules': 2,\n",
        "   'Functions': 9,\n",
        "   'Classes': 0,\n",
-       "   'Comment_Lines': 84,\n",
+       "   'Comment_Lines': 74,\n",
        "   'Complexity_Score': 26,\n",
        "   'warnings': 0,\n",
        "   'core_modules': ['asyncio', 'os', 'sys', 'urllib.error', 'urllib.request'],\n",
        "   'imported_modules': ['fire', 'linkaudit'],\n",
        "   'file_name': 'linkaudit.py',\n",
-       "   'sast_result': {171: {'line': 171,\n",
-       "     'validation': 'input',\n",
-       "     'severity': 'Low',\n",
-       "     'info': 'User input must be strictly sanitized and validated to prevent injection vulnerabilities.',\n",
-       "     'code': \"<pre><code class='language-python'>    files_tocheck = markdownhelpers.collect_markdown_files(bookdirectory)\\n    result_output = input(&quot;HTML output [H] (=Default) or TXT output [T]? )&quot;)\\n    txtoutput = &quot;# Result of Link Audit for markdown files (URL checker) \\\\n\\\\n&quot;</code></pre>\"}}},\n",
+       "   'sast_result': {}},\n",
        "  4: {'FileName': '_version.py',\n",
-       "   'FilePath': '/tmp/codeaudit_sviyoehh/linkaudit-0.9.8/src/linkaudit/_version.py',\n",
+       "   'FilePath': '/tmp/codeaudit_aftxsa3p/linkaudit-0.9.10/src/linkaudit/_version.py',\n",
        "   'Number_Of_Lines': 1,\n",
        "   'AST_Nodes': 1,\n",
        "   'Std-Modules': 0,\n",
@@ -149,7 +155,7 @@
        "   'file_name': '_version.py',\n",
        "   'sast_result': {}},\n",
        "  5: {'FileName': 'nocxhelpers.py',\n",
-       "   'FilePath': '/tmp/codeaudit_sviyoehh/linkaudit-0.9.8/src/linkaudit/nocxhelpers.py',\n",
+       "   'FilePath': '/tmp/codeaudit_aftxsa3p/linkaudit-0.9.10/src/linkaudit/nocxhelpers.py',\n",
        "   'Number_Of_Lines': 30,\n",
        "   'AST_Nodes': 9,\n",
        "   'Std-Modules': 0,\n",
@@ -191,7 +197,7 @@
    "name": "python",
    "nbconvert_exporter": "python",
    "pygments_lexer": "ipython3",
-   "version": "3.14.3"
+   "version": "3.14.8"
   }
  },
  "nbformat": 4,

{codeaudit-1.9.1 → codeaudit-1.9.3}/docs/examples/codeauditchecks.html

@@ -422,7 +422,7 @@ footer {
     <tr>
       <td>Input Function</td>
       <td>input</td>
-      <td>Low</td>
+      <td>High</td>
       <td>User input must be strictly sanitized and validated to prevent injection vulnerabilities.</td>
     </tr>
     <tr>
@@ -774,4 +774,4 @@ footer {
       <td>Vulnerable to path traversal attacks if used with untrusted archives.</td>
     </tr>
   </tbody>
-</table><br><p>Number of implemented security validations:<b>89</b></p><p>Version of codeaudit: <b>1.9.1</b><p>Because Python and cybersecurity are constantly changing, issue reports <b>SHOULD</b> specify the codeaudit version used.</p><p><b>Disclaimer:</b> <i>This SAST tool <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> provides a powerful, automatic security analysis for Python source code. However, it's not a substitute for human review in combination with business knowledge. Undetected vulnerabilities may still exist.</i></p><p>This Python security report was created on: <b>2026-10-09 11:58</b> with <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> version <b>1.9.1</b></p><hr><footer><div class="footer-links">Check the <a href="https://nocomplexity.com/documents/codeaudit/intro.html" target="_blank">documentation</a> for help on found issues.<br>Codeaudit is made with <span class="heart">&#10084;</span> by cyber security professionals who advocate for <a href="https://nocomplexity.com/simplify-security/" target="_blank">open simple security solutions</a>.<br><a href="https://nocomplexity.com/documents/codeaudit/CONTRIBUTE.html" target="_blank">Join the community</a> and contribute to make this tool better!</div></footer></div></body></html>
+</table><br><p>Number of implemented security validations:<b>89</b></p><p>Version of codeaudit: <b>1.9.3</b><p>Because Python and cybersecurity are constantly changing, issue reports <b>SHOULD</b> specify the codeaudit version used.</p><p><b>Disclaimer:</b> <i>This SAST tool <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> provides a powerful, automatic security analysis for Python source code. However, it's not a substitute for human review in combination with business knowledge. Undetected vulnerabilities may still exist.</i></p><p>This Python security report was created on: <b>2026-10-30 18:27</b> with <a href="https://github.com/nocomplexity/codeaudit" target="_blank"><b>Python Code Audit</b></a> version <b>1.9.3</b></p><hr><footer><div class="footer-links">Check the <a href="https://nocomplexity.com/documents/codeaudit/intro.html" target="_blank">documentation</a> for help on found issues.<br>Codeaudit is made with <span class="heart">&#10084;</span> by cyber security professionals who advocate for <a href="https://nocomplexity.com/simplify-security/" target="_blank">open simple security solutions</a>.<br><a href="https://nocomplexity.com/documents/codeaudit/CONTRIBUTE.html" target="_blank">Join the community</a> and contribute to make this tool better!</div></footer></div></body></html>

{codeaudit-1.9.1 → codeaudit-1.9.3}/docs/examples/demoscan.json

@@ -1,7 +1,7 @@
 {
   "name": "Python_Code_Audit",
-  "version": "1.9.1",
-  "generated_on": "2026-10-09 11:58",
+  "version": "1.9.3",
+  "generated_on": "2026-10-30 18:27",
   "file_security_info": {
     "0": {
       "FileName": "demofile.py",

{codeaudit-1.9.1 → codeaudit-1.9.3}/docs/makeitbetter.md

@@ -38,6 +38,16 @@ To lower the barrier for new contributors, I'd make the tone more welcoming, red
 
 Welcome! This guide will help you set up a local development environment for Python Code Audit and start contributing to the project.
 
+### 0. Create and activate an new environment
+
+I prefer using [`conda`](https://nocomplexity.com/documents/pythonbook/environments.html#environments) but use what you want.
+
+Set up a new environment:
+```bash
+conda create --name codeaudit_dev python=3.15
+```
+
+
 ### 1. Clone the repository
 
 We recommend working in a dedicated virtual environment to avoid conflicts with other Python projects.
@@ -48,14 +58,16 @@ The Python Code Audit source code is hosted on GitHub.
 ```bash
 git clone https://github.com/nocomplexity/codeaudit
 cd codeaudit
+pip install -e .
 ```
 
+
 ### 2. Install development dependencies
 
 Install `pytest`, which is used for running the test suite:
 
 ```bash
-pip install pytest
+pip install -U pytest
 ```
 
 ### 3. Install Hatch

{codeaudit-1.9.1 → codeaudit-1.9.3}/pyproject.toml

@@ -25,6 +25,7 @@ classifiers = [
   "Programming Language :: Python :: 3.12",
   "Programming Language :: Python :: 3.13",
   "Programming Language :: Python :: 3.14",
+  "Programming Language :: Python :: 3.15",
 ]
 
 [project.optional-dependencies]
@@ -57,14 +58,14 @@ extra-dependencies = [
 check = "mypy --install-types --non-interactive {args:src/codeaudit tests}"
 
 [[tool.hatch.envs.hatch-test.matrix]]
-python = ["3.14", "3.13", "3.12"]
+python = ["3.15", "3.14", "3.13", "3.12"]
 
 [tool.hatch.envs.hatch-test]
 randomize = true
 dependencies = ["pytest", "pytest-cov", "coverage"]
 
 [tool.black]
-target-version = ["py311", "py312", "py313", "py314"]
+target-version = ["py312", "py313", "py314","py315"]
 extend-exclude ='(python2_file_willnotwork|dunderexec_with_parsing_error).py|validationfiles|suppression|spytestdir'
 
 [tool.coverage.run]
@@ -78,8 +79,8 @@ show_missing = true
 dependencies = ["black", "pylint"]
 
 [tool.hatch.envs.hatch-static-analysis.scripts]
-format-check = "black --target-version py313 --check src tests"
-format-fix = "black --target-version py313 src tests"
+format-check = "black --target-version py314 --check src tests"
+format-fix = "black --target-version py314 src tests"
 lint-check = "pylint src tests"
 
 [tool.pytest]

{codeaudit-1.9.1 → codeaudit-1.9.3}/src/codeaudit/__about__.py

@@ -1,4 +1,4 @@
 # SPDX-FileCopyrightText: 2025-present Maikel Mardjan
 #
 # SPDX-License-Identifier: GPL-3.0-or-later
-__version__ = "1.9.1"
+__version__ = "1.9.3"

{codeaudit-1.9.1 → codeaudit-1.9.3}/src/codeaudit/altairplots.py

@@ -18,7 +18,8 @@ import pandas as pd
 
 from collections import Counter
 from pathlib import Path
-
+from codeaudit.api_interfaces import get_weakness_counts
+from codeaudit.api_reporting import total_weaknesses
 
 def module_count_barchart(scanresult):
     """Create a bar chart showing module counts by category.
@@ -689,20 +690,8 @@ def weaknesses_overview(scanresult):
             .mark_text()
             .encode(text="msg:N")
         )
-
-    # --- Count every 'validation' across all files ---
-    counter = Counter()
-    for file_info in file_security_info.values():
-        if not isinstance(file_info, dict):
-            continue
-        sast_result = file_info.get("sast_result")
-        if not isinstance(sast_result, dict):
-            continue
-        for finding in sast_result.values():
-            if isinstance(finding, dict):
-                validation = finding.get("validation")
-                if validation and isinstance(validation, str):
-                    counter[validation] += 1
+    # --- Count every validation across all files ---
+    counter = Counter(get_weakness_counts(scanresult))    
 
     if not counter:
         return (
@@ -875,7 +864,7 @@ def sast_files_overview(scanresult):
                 "base_name": base_name,
                 "parent_folder": parent_folder,
                 "full_path": str(filepath),
-                "issues": len(sast_result),
+                "issues": total_weaknesses(scanresult),
                 "complexity": file_info.get("Complexity_Score", 0),
             }
         )
@@ -977,19 +966,8 @@ def weaknesses_radial_overview(scanresult):
         )
 
     # --- Count every 'validation' across all files ---
-    counter = Counter()
-    for file_info in file_security_info.values():
-        if not isinstance(file_info, dict):
-            continue
-        sast_result = file_info.get("sast_result")
-        if not isinstance(sast_result, dict):
-            continue
-        for finding in sast_result.values():
-            if isinstance(finding, dict):
-                validation = finding.get("validation")
-                if validation and isinstance(validation, str):
-                    counter[validation] += 1
-
+    counter = Counter(get_weakness_counts(scanresult))    
+   
     if not counter:
         return (
             alt.Chart(

{codeaudit-1.9.1 → codeaudit-1.9.3}/src/codeaudit/api_interfaces.py

@@ -315,38 +315,56 @@ def read_input_file(filename, safe_directory="data_folder"):
 
 def get_weakness_counts(input_file, nosec=False):
     """
-    Analyze a Python file or package and count occurrences of code weaknesses.
+    Count SAST weaknesses.
+
+    Accepts either:
+    - A scan result dictionary.
+    - A file/package path that will be scanned.
     """
-    # Assuming filescan is imported from codeaudit.api_interfaces
-    scan_result = filescan(input_file, nosec)
+
+    # Accept an existing scan result or scan a file/package
+    if isinstance(input_file, dict):
+        scan_result = input_file
+    else:
+        scan_result = filescan(input_file, nosec)
 
     if not isinstance(scan_result, dict):
-        raise ValueError("filescan() did not return a valid result dictionary")
+        raise ValueError("Invalid scan result")
 
     if "Error" in scan_result:
         raise ValueError(scan_result["Error"])
 
     file_security_info = scan_result.get("file_security_info")
+
     if not isinstance(file_security_info, dict):
         return {}
 
     counter = Counter()
 
     for file_info in file_security_info.values():
+
         if not isinstance(file_info, dict):
             continue
 
         sast_result = file_info.get("sast_result", {})
+
         if not isinstance(sast_result, dict):
             continue
 
-        # Based on your data: sast_result keys are line numbers (e.g., 171)
-        # and values are dicts containing the 'validation' type.
-        for issue_details in sast_result.values():
-            if isinstance(issue_details, dict):
-                # We use the 'validation' field to identify the type of weakness
-                weakness_type = issue_details.get("validation", "Unknown")
-                counter[weakness_type] += 1
+        for finding in sast_result.values():
+
+            # Support individual findings and lists of findings
+            findings = finding if isinstance(finding, list) else [finding]
+
+            for issue in findings:
+
+                if not isinstance(issue, dict):
+                    continue
+
+                weakness_type = issue.get("validation", "Unknown")
+
+                if isinstance(weakness_type, str) and weakness_type:
+                    counter[weakness_type] += 1
 
     return dict(counter)
 

{codeaudit-1.9.1 → codeaudit-1.9.3}/src/codeaudit/api_reporting.py

@@ -19,17 +19,33 @@ So all results are returned as Pandas Dataframe. This makes things easier for fu
 
 """
 
-
 def total_weaknesses(scan_result):
-    """Returns the total weaknesses found
-    input: scan_result (dict): Scan output containing "file_security_info" with
-            per-file SAST findings. Each finding should include a "validation" field.
+    """Count all individual weaknesses in a scan result.
+
+    Walks through each file's SAST findings and adds up every
+    individual weakness found.
+
+    Args:
+        scan_result (dict): Scan output with a "file_security_info" key
+            mapping file names to their per-file results. Each file's
+            "sast_result" maps check names to either a single finding
+            or a list of findings.
 
-    """
+    Returns:
+        int: Total number of individual weaknesses across all files.
+    """    
     total = 0
 
-    for file_info in scan_result.get("file_security_info", {}).values():
+    file_security_info = scan_result.get("file_security_info", {})
+
+    for file_info in file_security_info.values():
         sast_result = file_info.get("sast_result", {})
-        total += len(sast_result)
+
+        for finding in sast_result.values():
+            if isinstance(finding, list):
+                total += len(finding)
+            else:
+                total += 1
 
     return total
+

{codeaudit-1.9.1 → codeaudit-1.9.3}/src/codeaudit/data/sastchecks.csv

@@ -9,7 +9,7 @@ Directory Creation,os.mknod,Low,Direct file system calls require careful input v
 Directory Creation,os.makedev,Low,Direct file system calls require careful input validation to prevent vulnerabilities.
 OS Forking,os.fork,Low,"On macOS use of this function is unsafe when mixed with using higher-level system APIs, and that includes using urllib.request."
 Dangerous Built-in: eval,eval,High,This function can execute arbitrary code. Never safe with untrusted input.
-Input Function,input,Low,User input must be strictly sanitized and validated to prevent injection vulnerabilities.
+Input Function,input,High,User input must be strictly sanitized and validated to prevent injection vulnerabilities.
 Overly Broad Exception Handling,pass,Low,Using `pass` in an `except` block can silently ignore critical security exceptions.
 Overly Broad Exception Handling,continue,Low,Skipping over exceptions can mask critical errors and security risks.
 Dangerous Built-in: exec,exec,High,This function can execute arbitrary code and should be used only with validated constructs.

{codeaudit-1.9.1 → codeaudit-1.9.3}/src/codeaudit/pypi_package_scan.py

@@ -14,6 +14,7 @@ Public API functions for Python Code Audit aka codeaudit on pypi.org
 """
 
 import gzip
+import os
 import json
 import tarfile
 import tempfile
@@ -84,12 +85,35 @@ def get_pypi_download_info(package_name):
 
 
 def is_valid_tar_gz(path):
-    """Return True if the given path is a valid .tar.gz file.
-    Custom validation values for validate_tar_gz are used. So note that NOT all tar.gz files will be accepted. Use PyPI package scan instead if possible.
+    """Return True only if the path points to a valid .tar.gz archive.
+
+    Archives must pass custom validation limits:
+    - Maximum file size: 15 MiB
+    - Maximum number of tar members: 12,000
     """
-    return bool(
-        validate_tar_gz(path, max_file_size=15 * 1024 * 1024, max_tar_members=12000)
-    )
+    try:
+        path = os.fspath(path)
+
+        return (
+            path.endswith(".tar.gz")
+            and validate_tar_gz(
+                path,
+                max_file_size=15 * 1024 * 1024,
+                max_tar_members=12000,
+            )
+            and tarfile.is_tarfile(path)
+        )
+    except (OSError, ValueError, TypeError, AttributeError, tarfile.TarError):
+        return False
+
+
+# def is_valid_tar_gz(path):
+#     """Return True if the given path is a valid .tar.gz file.
+#     Custom validation values for validate_tar_gz are used. So note that NOT all tar.gz files will be accepted. Use PyPI package scan instead if possible.
+#     """
+#     return bool(
+#         validate_tar_gz(path, max_file_size=15 * 1024 * 1024, max_tar_members=12000)
+#     )
 
 
 def get_targz_package_source(