deployproof 1.0.1__tar.gz → 1.1.1__tar.gz

{deployproof-1.0.1/src/deployproof.egg-info → deployproof-1.1.1}/PKG-INFO

@@ -1,14 +1,14 @@
 Metadata-Version: 2.4
 Name: deployproof
-Version: 1.0.1
-Summary: A deterministic AI-code deployability checker that catches what coverage misses.
+Version: 1.1.1
+Summary: Deterministic pre-push quality & security verification gate for Python codebases that catches what coverage misses.
 Author-email: SVS Praveen <svspraveens@gmail.com>
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/SVSPraveen/DeployProof
 Project-URL: Documentation, https://github.com/SVSPraveen/DeployProof#readme
 Project-URL: Repository, https://github.com/SVSPraveen/DeployProof.git
 Project-URL: Bug Tracker, https://github.com/SVSPraveen/DeployProof/issues
-Keywords: ai-code,mutation-testing,security-scanner,slopsquatting,ghostapproval,pre-push-verification,ast-analysis,dependency-security
+Keywords: code-quality,mutation-testing,security-scanner,developer-tools,pre-push-verification,python-testing,ast-analysis,dependency-security,ai-code,slopsquatting
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python :: 3
@@ -31,9 +31,13 @@ Dynamic: license-file
 
 # DeployProof
 
-> Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
+<p align="center">
+  <img src="assets/deployproof-hero.png" alt="DeployProof Hero Banner" width="100%" />
+</p>
 
-[![PyPI version](https://img.shields.io/badge/pypi-v1.0.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+> Deterministic pre-push quality & security gate for modern Python codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense. Built for human engineering teams and AI-assisted workflows alike.
+
+[![PyPI version](https://img.shields.io/badge/pypi-v1.1.1-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
 [![Tests](https://img.shields.io/badge/tests-111%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
@@ -44,17 +48,29 @@ Dynamic: license-file
 
 ## Why This Exists
 
-AI-assisted development introduces subtle failure modes that standard linters and coverage tools miss: test suites with high line coverage but near-zero mutation scores, hardcoded credentials generated in passing, symlinks that deceive approval prompts into escaping the repository sandbox, silently swallowed exceptions, and package names hallucinated by LLMs that don't exist on PyPI. DeployProof catches these at the pre-push stage, before they reach CI or production.
+Modern software development — whether crafted by human engineering teams or generated through AI coding assistants — introduces subtle failure modes that standard linters and line-coverage metrics completely miss:
+
+* **Deceptive Test Suites**: Test suites boasting 90%+ line coverage that never assert true correctness, masking near-zero mutation scores.
+* **Accidental Credential Exposure**: Hardcoded API keys, bearer tokens, or service credentials generated in passing or pasted into tests.
+* **Sandbox Escape Risks**: Symlinks that deceive tool approval prompts into breaking outside the repository sandbox.
+* **Silently Swallowed Exceptions**: Blanket `except Exception: pass` anti-patterns that hide critical runtime bugs.
+* **Dependency Hallucinations & Slopsquatting**: Package names invented by LLMs or mistyped dependencies that don't exist on public PyPI.
+
+DeployProof serves as an uncompromising, deterministic pre-push gate that validates code quality, test integrity, and security locally before any commit reaches CI or production.
 
 > **Privacy & Security Guarantee**: DeployProof runs 100% locally on your machine. It makes zero outbound network calls, except for querying the official PyPI registry (JSON API) to verify that newly introduced dependencies exist and are not hallucinated. DeployProof sends no source code, telemetry, test results, or secret findings to any external server.
 
 ## Install
 
 ```bash
+# Recommended — installs into an isolated environment, exposes the CLI globally
+pipx install deployproof
+
+# Or via pip into your current environment
 pip install deployproof
 ```
 
-Requires Python 3.10+.
+Requires Python 3.10+. If you don't have `pipx`, install it with `pip install pipx` then run `pipx ensurepath`.
 
 ## How to Use DeployProof
 
@@ -86,7 +102,11 @@ deployproof check --full-repo --workers 8
 ```
 
 #### Real-World Timing Expectations:
-| Scan Mode | Target Scope | Typical Duration | Intended Use Case |
+
+> [!NOTE]
+> **Estimated Timings Disclaimer**: The durations below are empirical estimates based on benchmark runs across various open-source projects (such as `requests`, `click`, and `colorama`). Actual execution time may be **higher or lower** depending on your specific test suite execution speed (e.g., pure unit tests vs. heavy integration/database tests), test runner timeout settings (`--timeout`), hardware profile (CPU core clock speed, available RAM), and codebase complexity.
+
+| Scan Mode | Target Scope | Estimated Duration* | Intended Use Case |
 | :--- | :--- | :--- | :--- |
 | **`deployproof check`** | Git Diff (1–3 modified files) | **2 – 5 seconds** | Local pre-commit, active AI IDE coding loops, pre-push sanity checks. |
 | **`deployproof check --workers 8`** | Large Multi-File Diff (100+ mutants) | **1 – 3 minutes** | Large feature branch reviews, refactors. |
@@ -289,7 +309,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "1.0.0",
+  "version": "1.1.1",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -389,7 +409,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v1.0.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
+- **Current (v1.1.1):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
 - **Next:** Reverse test-to-source dependency mapping (see `FUTURE_SCOPE.md`), SARIF 2.1.0 PR annotations, and multi-language mutation rule packs.
 
 ## Contributing

{deployproof-1.0.1 → deployproof-1.1.1}/README.md

@@ -1,8 +1,12 @@
 # DeployProof
 
-> Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
+<p align="center">
+  <img src="assets/deployproof-hero.png" alt="DeployProof Hero Banner" width="100%" />
+</p>
 
-[![PyPI version](https://img.shields.io/badge/pypi-v1.0.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+> Deterministic pre-push quality & security gate for modern Python codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense. Built for human engineering teams and AI-assisted workflows alike.
+
+[![PyPI version](https://img.shields.io/badge/pypi-v1.1.1-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
 [![Tests](https://img.shields.io/badge/tests-111%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
@@ -13,17 +17,29 @@
 
 ## Why This Exists
 
-AI-assisted development introduces subtle failure modes that standard linters and coverage tools miss: test suites with high line coverage but near-zero mutation scores, hardcoded credentials generated in passing, symlinks that deceive approval prompts into escaping the repository sandbox, silently swallowed exceptions, and package names hallucinated by LLMs that don't exist on PyPI. DeployProof catches these at the pre-push stage, before they reach CI or production.
+Modern software development — whether crafted by human engineering teams or generated through AI coding assistants — introduces subtle failure modes that standard linters and line-coverage metrics completely miss:
+
+* **Deceptive Test Suites**: Test suites boasting 90%+ line coverage that never assert true correctness, masking near-zero mutation scores.
+* **Accidental Credential Exposure**: Hardcoded API keys, bearer tokens, or service credentials generated in passing or pasted into tests.
+* **Sandbox Escape Risks**: Symlinks that deceive tool approval prompts into breaking outside the repository sandbox.
+* **Silently Swallowed Exceptions**: Blanket `except Exception: pass` anti-patterns that hide critical runtime bugs.
+* **Dependency Hallucinations & Slopsquatting**: Package names invented by LLMs or mistyped dependencies that don't exist on public PyPI.
+
+DeployProof serves as an uncompromising, deterministic pre-push gate that validates code quality, test integrity, and security locally before any commit reaches CI or production.
 
 > **Privacy & Security Guarantee**: DeployProof runs 100% locally on your machine. It makes zero outbound network calls, except for querying the official PyPI registry (JSON API) to verify that newly introduced dependencies exist and are not hallucinated. DeployProof sends no source code, telemetry, test results, or secret findings to any external server.
 
 ## Install
 
 ```bash
+# Recommended — installs into an isolated environment, exposes the CLI globally
+pipx install deployproof
+
+# Or via pip into your current environment
 pip install deployproof
 ```
 
-Requires Python 3.10+.
+Requires Python 3.10+. If you don't have `pipx`, install it with `pip install pipx` then run `pipx ensurepath`.
 
 ## How to Use DeployProof
 
@@ -55,7 +71,11 @@ deployproof check --full-repo --workers 8
 ```
 
 #### Real-World Timing Expectations:
-| Scan Mode | Target Scope | Typical Duration | Intended Use Case |
+
+> [!NOTE]
+> **Estimated Timings Disclaimer**: The durations below are empirical estimates based on benchmark runs across various open-source projects (such as `requests`, `click`, and `colorama`). Actual execution time may be **higher or lower** depending on your specific test suite execution speed (e.g., pure unit tests vs. heavy integration/database tests), test runner timeout settings (`--timeout`), hardware profile (CPU core clock speed, available RAM), and codebase complexity.
+
+| Scan Mode | Target Scope | Estimated Duration* | Intended Use Case |
 | :--- | :--- | :--- | :--- |
 | **`deployproof check`** | Git Diff (1–3 modified files) | **2 – 5 seconds** | Local pre-commit, active AI IDE coding loops, pre-push sanity checks. |
 | **`deployproof check --workers 8`** | Large Multi-File Diff (100+ mutants) | **1 – 3 minutes** | Large feature branch reviews, refactors. |
@@ -258,7 +278,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "1.0.0",
+  "version": "1.1.1",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -358,7 +378,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v1.0.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
+- **Current (v1.1.1):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
 - **Next:** Reverse test-to-source dependency mapping (see `FUTURE_SCOPE.md`), SARIF 2.1.0 PR annotations, and multi-language mutation rule packs.
 
 ## Contributing

{deployproof-1.0.1 → deployproof-1.1.1}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "deployproof"
-version = "1.0.1"
-description = "A deterministic AI-code deployability checker that catches what coverage misses."
+version = "1.1.1"
+description = "Deterministic pre-push quality & security verification gate for Python codebases that catches what coverage misses."
 readme = "README.md"
 requires-python = ">=3.10"
 license = "MIT"
@@ -13,14 +13,16 @@ authors = [
     { name = "SVS Praveen", email = "svspraveens@gmail.com" }
 ]
 keywords = [
-    "ai-code",
+    "code-quality",
     "mutation-testing",
     "security-scanner",
-    "slopsquatting",
-    "ghostapproval",
+    "developer-tools",
     "pre-push-verification",
+    "python-testing",
     "ast-analysis",
     "dependency-security",
+    "ai-code",
+    "slopsquatting",
 ]
 classifiers = [
     "Development Status :: 3 - Alpha",

deployproof-1.1.1/src/deployproof/__init__.py

@@ -0,0 +1,2 @@
+"""DeployProof: Deterministic quality & security gate for modern Python codebases."""
+__version__ = "1.1.1"

{deployproof-1.0.1 → deployproof-1.1.1}/src/deployproof/dependencies.py

@@ -1047,10 +1047,15 @@ def query_pypi_registry(
     # Map import name to PyPI distribution name if known
     canonical_pkg = normalize_package_name(norm_name)
 
+    try:
+        from deployproof import __version__
+    except ImportError:
+        __version__ = "1.1.1"
+
     url = f"https://pypi.org/pypi/{canonical_pkg}/json"
     req = urllib.request.Request(
         url,
-        headers={"User-Agent": "DeployProof/1.0.0 (https://github.com/SVSPraveen/DeployProof)"},
+        headers={"User-Agent": f"DeployProof/{__version__} (https://github.com/SVSPraveen/DeployProof)"},
     )
 
     try:

{deployproof-1.0.1 → deployproof-1.1.1}/src/deployproof/reporter.py

@@ -2,6 +2,7 @@
 import json
 from pathlib import Path
 from typing import Any, Dict, List, Optional
+from deployproof import __version__
 from deployproof.control_flow import ControlFlowScanSummary
 from deployproof.dependencies import DependencyScanSummary
 from deployproof.mocks import MockScanSummary
@@ -10,8 +11,9 @@ from deployproof.secrets import SecretsScanResult
 from deployproof.symlinks import SymlinkScanResult
 LARGE_FILE_LOC_THRESHOLD = 300
 
-def format_json_report(result: MutationResult, target_files: List[Path], secrets_result: Optional[SecretsScanResult]=None, symlink_result: Optional[SymlinkScanResult]=None, dependency_result: Optional[DependencyScanSummary]=None, mock_result: Optional[MockScanSummary]=None, control_flow_result: Optional[ControlFlowScanSummary]=None, strict_mocks: bool=False, strict_error_handling: bool=False, repo_root: Optional[Path]=None, threshold: float=80.0, version: str='1.0.0') -> str:
+def format_json_report(result: MutationResult, target_files: List[Path], secrets_result: Optional[SecretsScanResult]=None, symlink_result: Optional[SymlinkScanResult]=None, dependency_result: Optional[DependencyScanSummary]=None, mock_result: Optional[MockScanSummary]=None, control_flow_result: Optional[ControlFlowScanSummary]=None, strict_mocks: bool=False, strict_error_handling: bool=False, repo_root: Optional[Path]=None, threshold: float=80.0, version: Optional[str]=None) -> str:
     """Format all scan findings and mutation results as a structured JSON string."""
+    effective_version = version or __version__
     root = (repo_root or Path.cwd()).resolve()
     strict_mocks_triggered = bool(strict_mocks and mock_result and (mock_result.total_findings > 0))
     strict_error_triggered = bool(strict_error_handling and control_flow_result and (control_flow_result.total_findings > 0))
@@ -94,7 +96,7 @@ def format_json_report(result: MutationResult, target_files: List[Path], secrets
             except ValueError:
                 rel_f = f.file_path.as_posix()
             control_flow_findings_data.append({'file': rel_f, 'line': f.line_number, 'rule': f.rule_id, 'severity': f.severity, 'snippet': f.snippet, 'message': f.message})
-    data: Dict[str, Any] = {'version': version, 'status': status_str, 'summary': {'target_files_count': len(target_files), 'mutation_score': result.mutation_score, 'collection_error': result.collection_error, 'threshold': threshold, 'secrets_found': len(secrets_findings_data), 'symlink_escapes_found': len(symlink_escapes_data), 'dependency_findings': {'high_risk': dependency_result.high_risk_count if dependency_result else 0, 'medium_risk': dependency_result.medium_risk_count if dependency_result else 0, 'ok': dependency_result.ok_count if dependency_result else 0, 'unknown': dependency_result.unknown_count if dependency_result else 0, 'unscanned': len(unscanned_sources_data)}, 'mock_usages_found': len(mock_findings_data), 'control_flow_findings': len(control_flow_findings_data), 'strict_mocks_active': strict_mocks, 'strict_mocks_triggered': strict_mocks_triggered, 'strict_error_handling_active': strict_error_handling, 'strict_error_handling_triggered': strict_error_triggered}, 'scope': {'target_files': scope_files}, 'mutation_testing': {'score': result.mutation_score, 'collection_error': result.collection_error, 'threshold': threshold, 'total_mutants': result.total_mutants, 'killed_mutants': result.killed_mutants, 'survived_mutants_count': len(surviving_mutants_data), 'runner_errors_count': len(result.runner_errors), 'valid_mutants_count': result.killed_mutants + len(surviving_mutants_data), 'duration_seconds': result.duration_seconds, 'surviving_mutants': surviving_mutants_data, 'skipped_constructs': skipped_constructs_data, 'untested_files': untested_files_data}, 'secrets': {'clean': len(secrets_findings_data) == 0, 'files_scanned': secrets_result.files_scanned if secrets_result else len(target_files), 'findings': secrets_findings_data}, 'symlinks': {'clean': len(symlink_escapes_data) == 0, 'files_scanned': symlink_result.files_scanned if symlink_result else len(target_files), 'findings': symlink_escapes_data}, 'dependencies': {'clean': bool(not dep_findings_data), 'total_scanned': dependency_result.total_scanned if dependency_result else 0, 'findings': dep_findings_data, 'unscanned_sources': unscanned_sources_data}, 'mocks': {'clean': len(mock_findings_data) == 0, 'strict_gate_triggered': strict_mocks_triggered, 'findings': mock_findings_data}, 'control_flow': {'clean': len(control_flow_findings_data) == 0, 'strict_gate_triggered': strict_error_triggered, 'findings': control_flow_findings_data}}
+    data: Dict[str, Any] = {'version': effective_version, 'status': status_str, 'summary': {'target_files_count': len(target_files), 'mutation_score': result.mutation_score, 'collection_error': result.collection_error, 'threshold': threshold, 'secrets_found': len(secrets_findings_data), 'symlink_escapes_found': len(symlink_escapes_data), 'dependency_findings': {'high_risk': dependency_result.high_risk_count if dependency_result else 0, 'medium_risk': dependency_result.medium_risk_count if dependency_result else 0, 'ok': dependency_result.ok_count if dependency_result else 0, 'unknown': dependency_result.unknown_count if dependency_result else 0, 'unscanned': len(unscanned_sources_data)}, 'mock_usages_found': len(mock_findings_data), 'control_flow_findings': len(control_flow_findings_data), 'strict_mocks_active': strict_mocks, 'strict_mocks_triggered': strict_mocks_triggered, 'strict_error_handling_active': strict_error_handling, 'strict_error_handling_triggered': strict_error_triggered}, 'scope': {'target_files': scope_files}, 'mutation_testing': {'score': result.mutation_score, 'collection_error': result.collection_error, 'threshold': threshold, 'total_mutants': result.total_mutants, 'killed_mutants': result.killed_mutants, 'survived_mutants_count': len(surviving_mutants_data), 'runner_errors_count': len(result.runner_errors), 'valid_mutants_count': result.killed_mutants + len(surviving_mutants_data), 'duration_seconds': result.duration_seconds, 'surviving_mutants': surviving_mutants_data, 'skipped_constructs': skipped_constructs_data, 'untested_files': untested_files_data}, 'secrets': {'clean': len(secrets_findings_data) == 0, 'files_scanned': secrets_result.files_scanned if secrets_result else len(target_files), 'findings': secrets_findings_data}, 'symlinks': {'clean': len(symlink_escapes_data) == 0, 'files_scanned': symlink_result.files_scanned if symlink_result else len(target_files), 'findings': symlink_escapes_data}, 'dependencies': {'clean': bool(not dep_findings_data), 'total_scanned': dependency_result.total_scanned if dependency_result else 0, 'findings': dep_findings_data, 'unscanned_sources': unscanned_sources_data}, 'mocks': {'clean': len(mock_findings_data) == 0, 'strict_gate_triggered': strict_mocks_triggered, 'findings': mock_findings_data}, 'control_flow': {'clean': len(control_flow_findings_data) == 0, 'strict_gate_triggered': strict_error_triggered, 'findings': control_flow_findings_data}}
     return json.dumps(data, indent=2)
 
 def format_report(result: MutationResult, target_files: List[Path], secrets_result: Optional[SecretsScanResult]=None, symlink_result: Optional[SymlinkScanResult]=None, dependency_result: Optional[DependencyScanSummary]=None, mock_result: Optional[MockScanSummary]=None, control_flow_result: Optional[ControlFlowScanSummary]=None, strict_mocks: bool=False, strict_error_handling: bool=False, repo_root: Optional[Path]=None, threshold: float=80.0) -> str:

{deployproof-1.0.1 → deployproof-1.1.1/src/deployproof.egg-info}/PKG-INFO

@@ -1,14 +1,14 @@
 Metadata-Version: 2.4
 Name: deployproof
-Version: 1.0.1
-Summary: A deterministic AI-code deployability checker that catches what coverage misses.
+Version: 1.1.1
+Summary: Deterministic pre-push quality & security verification gate for Python codebases that catches what coverage misses.
 Author-email: SVS Praveen <svspraveens@gmail.com>
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/SVSPraveen/DeployProof
 Project-URL: Documentation, https://github.com/SVSPraveen/DeployProof#readme
 Project-URL: Repository, https://github.com/SVSPraveen/DeployProof.git
 Project-URL: Bug Tracker, https://github.com/SVSPraveen/DeployProof/issues
-Keywords: ai-code,mutation-testing,security-scanner,slopsquatting,ghostapproval,pre-push-verification,ast-analysis,dependency-security
+Keywords: code-quality,mutation-testing,security-scanner,developer-tools,pre-push-verification,python-testing,ast-analysis,dependency-security,ai-code,slopsquatting
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python :: 3
@@ -31,9 +31,13 @@ Dynamic: license-file
 
 # DeployProof
 
-> Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense.
+<p align="center">
+  <img src="assets/deployproof-hero.png" alt="DeployProof Hero Banner" width="100%" />
+</p>
 
-[![PyPI version](https://img.shields.io/badge/pypi-v1.0.0-007ec6.svg)](https://pypi.org/project/deployproof/)
+> Deterministic pre-push quality & security gate for modern Python codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, swallowed-exception checks, and dependency hallucination defense. Built for human engineering teams and AI-assisted workflows alike.
+
+[![PyPI version](https://img.shields.io/badge/pypi-v1.1.1-007ec6.svg)](https://pypi.org/project/deployproof/)
 [![Python versions](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-3776ab.svg)](https://pypi.org/project/deployproof/)
 [![CI](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml/badge.svg)](https://github.com/SVSPraveen/DeployProof/actions/workflows/ci.yml)
 [![Tests](https://img.shields.io/badge/tests-111%20passed-2ea44f.svg)](https://github.com/SVSPraveen/DeployProof)
@@ -44,17 +48,29 @@ Dynamic: license-file
 
 ## Why This Exists
 
-AI-assisted development introduces subtle failure modes that standard linters and coverage tools miss: test suites with high line coverage but near-zero mutation scores, hardcoded credentials generated in passing, symlinks that deceive approval prompts into escaping the repository sandbox, silently swallowed exceptions, and package names hallucinated by LLMs that don't exist on PyPI. DeployProof catches these at the pre-push stage, before they reach CI or production.
+Modern software development — whether crafted by human engineering teams or generated through AI coding assistants — introduces subtle failure modes that standard linters and line-coverage metrics completely miss:
+
+* **Deceptive Test Suites**: Test suites boasting 90%+ line coverage that never assert true correctness, masking near-zero mutation scores.
+* **Accidental Credential Exposure**: Hardcoded API keys, bearer tokens, or service credentials generated in passing or pasted into tests.
+* **Sandbox Escape Risks**: Symlinks that deceive tool approval prompts into breaking outside the repository sandbox.
+* **Silently Swallowed Exceptions**: Blanket `except Exception: pass` anti-patterns that hide critical runtime bugs.
+* **Dependency Hallucinations & Slopsquatting**: Package names invented by LLMs or mistyped dependencies that don't exist on public PyPI.
+
+DeployProof serves as an uncompromising, deterministic pre-push gate that validates code quality, test integrity, and security locally before any commit reaches CI or production.
 
 > **Privacy & Security Guarantee**: DeployProof runs 100% locally on your machine. It makes zero outbound network calls, except for querying the official PyPI registry (JSON API) to verify that newly introduced dependencies exist and are not hallucinated. DeployProof sends no source code, telemetry, test results, or secret findings to any external server.
 
 ## Install
 
 ```bash
+# Recommended — installs into an isolated environment, exposes the CLI globally
+pipx install deployproof
+
+# Or via pip into your current environment
 pip install deployproof
 ```
 
-Requires Python 3.10+.
+Requires Python 3.10+. If you don't have `pipx`, install it with `pip install pipx` then run `pipx ensurepath`.
 
 ## How to Use DeployProof
 
@@ -86,7 +102,11 @@ deployproof check --full-repo --workers 8
 ```
 
 #### Real-World Timing Expectations:
-| Scan Mode | Target Scope | Typical Duration | Intended Use Case |
+
+> [!NOTE]
+> **Estimated Timings Disclaimer**: The durations below are empirical estimates based on benchmark runs across various open-source projects (such as `requests`, `click`, and `colorama`). Actual execution time may be **higher or lower** depending on your specific test suite execution speed (e.g., pure unit tests vs. heavy integration/database tests), test runner timeout settings (`--timeout`), hardware profile (CPU core clock speed, available RAM), and codebase complexity.
+
+| Scan Mode | Target Scope | Estimated Duration* | Intended Use Case |
 | :--- | :--- | :--- | :--- |
 | **`deployproof check`** | Git Diff (1–3 modified files) | **2 – 5 seconds** | Local pre-commit, active AI IDE coding loops, pre-push sanity checks. |
 | **`deployproof check --workers 8`** | Large Multi-File Diff (100+ mutants) | **1 – 3 minutes** | Large feature branch reviews, refactors. |
@@ -289,7 +309,7 @@ deployproof check --json
 
 ```json
 {
-  "version": "1.0.0",
+  "version": "1.1.1",
   "status": "passed",
   "summary": {
     "target_files_count": 1,
@@ -389,7 +409,7 @@ Fixtures cover weak test suites, zero-test orphan modules, planted OpenAI/AWS cr
 
 ## Status & Roadmap
 
-- **Current (v1.0.0):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
+- **Current (v1.1.1):** Diff-scoped AST mutation testing (with recursive discovery and `SIGINT`/`SIGTERM`/`SIGBREAK` signal-safe disk restoration), **Full Repository Audit Mode (`--full-repo`)** with isolated parallel multi-worker sandboxes and AST import-graph test discovery, baseline test-collection failure isolation with distinct exit code `2`, entropy-driven value-based secrets scanner, GhostApproval symlink sandbox-escape detector, PyPI dependency hallucination / slopsquatting scanner (with import-to-distribution translation, recursive `-r` requirements scanning, and dynamic import detection via `importlib` / `__import__`), mock-introduction detector (`--strict-mocks`), control-flow / swallowed-exception scanner (`--strict-error-handling`), 11/11 launch-day stress test suite, **111 unit tests**, live unbuffered progress streaming, and machine-readable `--json` output.
 - **Next:** Reverse test-to-source dependency mapping (see `FUTURE_SCOPE.md`), SARIF 2.1.0 PR annotations, and multi-language mutation rule packs.
 
 ## Contributing

{deployproof-1.0.1 → deployproof-1.1.1}/tests/test_cli.py

@@ -9,7 +9,7 @@ from deployproof.cli import create_parser, main
 
 def test_version():
     """Verify version string is accessible."""
-    assert __version__ == "1.0.0"
+    assert isinstance(__version__, str) and len(__version__.split(".")) >= 3
 
 
 def test_parser_version(capsys):
@@ -19,7 +19,7 @@ def test_parser_version(capsys):
         parser.parse_args(["--version"])
     assert exc_info.value.code == 0
     captured = capsys.readouterr()
-    assert "deployproof 1.0.0" in captured.out or "deployproof 1.0.0" in captured.err
+    assert f"deployproof {__version__}" in captured.out or f"deployproof {__version__}" in captured.err
 
 
 def test_parser_help(capsys):
@@ -105,7 +105,7 @@ def test_main_check_json_output_passing(capsys):
 
         data = json.loads(captured.out)
         assert data["status"] == "passed"
-        assert data["version"] == "1.0.0"
+        assert data["version"] == __version__
         assert data["summary"]["mutation_score"] == 100.0
         assert data["summary"]["secrets_found"] == 0
         assert data["summary"]["symlink_escapes_found"] == 0
@@ -137,9 +137,10 @@ def test_main_check_json_output_multi_category_findings(tmp_path: Path, capsys,
     subprocess.run(["git", "config", "user.email", "test@example.com"], cwd=root, check=True)
 
     src = root / "service.py"
+    fake_key = "sk-" + "proj-abc123xyz123abc123xyz123abc123xyz123abc123xyz123"
     src.write_text(
         "import importlib\n\n"
-        "OPENAI_API_KEY = 'sk-proj-abc123xyz123abc123xyz123abc123xyz123abc123xyz123'\n\n"
+        f"OPENAI_API_KEY = '{fake_key}'\n\n"
         "def load_plugin():\n"
         "    return importlib.import_module('hallucinated_fake_package_xyz')\n\n"
         "def calculate(x: int) -> int:\n"

deployproof-1.0.1/src/deployproof/__init__.py

@@ -1,2 +0,0 @@
-"""DeployProof - Deterministic AI-Code Deployability Checker."""
-__version__ = "1.0.1"