depsdev 0.0.4__tar.gz → 0.0.5__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {depsdev-0.0.4 → depsdev-0.0.5}/.pre-commit-config.yaml +3 -3
- depsdev-0.0.5/PKG-INFO +143 -0
- depsdev-0.0.5/README.md +98 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/__main__.py +1 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/_version.py +16 -3
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/cli/purl.py +2 -1
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/cli/vuln.py +1 -1
- {depsdev-0.0.4 → depsdev-0.0.5}/tests/scripts_test.py +1 -1
- depsdev-0.0.4/PKG-INFO +0 -73
- depsdev-0.0.4/README.md +0 -28
- {depsdev-0.0.4 → depsdev-0.0.5}/.github/copilot-instructions.md +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/.github/workflows/main.yaml +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/.gitignore +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/.python-version +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/LICENSE.txt +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/pyproject.toml +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/__init__.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/base.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/cli/__init__.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/osv.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/py.typed +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/v3.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/src/depsdev/v3alpha.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/taplo.toml +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/tests/__init__.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/tests/main_test.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/tests/v3_test.py +0 -0
- {depsdev-0.0.4 → depsdev-0.0.5}/tests/v3alpha_test.py +0 -0
|
@@ -9,7 +9,7 @@ ci:
|
|
|
9
9
|
- uv-test
|
|
10
10
|
repos:
|
|
11
11
|
- repo: https://github.com/astral-sh/uv-pre-commit
|
|
12
|
-
rev: 0.
|
|
12
|
+
rev: 0.9.5
|
|
13
13
|
hooks:
|
|
14
14
|
- id: uv-lock
|
|
15
15
|
- id: uv-export
|
|
@@ -19,7 +19,7 @@ repos:
|
|
|
19
19
|
- id: taplo-format
|
|
20
20
|
- id: taplo-lint
|
|
21
21
|
- repo: https://github.com/astral-sh/ruff-pre-commit
|
|
22
|
-
rev: v0.
|
|
22
|
+
rev: v0.14.1
|
|
23
23
|
hooks:
|
|
24
24
|
- id: ruff-check
|
|
25
25
|
types_or: [python, pyi, jupyter]
|
|
@@ -36,7 +36,7 @@ repos:
|
|
|
36
36
|
- id: name-tests-test
|
|
37
37
|
- id: requirements-txt-fixer
|
|
38
38
|
- repo: https://github.com/pre-commit/mirrors-mypy
|
|
39
|
-
rev: v1.
|
|
39
|
+
rev: v1.18.2
|
|
40
40
|
hooks:
|
|
41
41
|
- id: mypy
|
|
42
42
|
- repo: local
|
depsdev-0.0.5/PKG-INFO
ADDED
|
@@ -0,0 +1,143 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: depsdev
|
|
3
|
+
Version: 0.0.5
|
|
4
|
+
Summary: Python wrapper for https://deps.dev/ API
|
|
5
|
+
Project-URL: Documentation, https://github.com/FlavioAmurrioCS/depsdev#readme
|
|
6
|
+
Project-URL: Issues, https://github.com/FlavioAmurrioCS/depsdev/issues
|
|
7
|
+
Project-URL: Source, https://github.com/FlavioAmurrioCS/depsdev
|
|
8
|
+
Author-email: Flavio Amurrio <25621374+FlavioAmurrioCS@users.noreply.github.com>
|
|
9
|
+
License-Expression: MIT
|
|
10
|
+
License-File: LICENSE.txt
|
|
11
|
+
Classifier: Development Status :: 4 - Beta
|
|
12
|
+
Classifier: Programming Language :: Python
|
|
13
|
+
Classifier: Programming Language :: Python :: 3.9
|
|
14
|
+
Classifier: Programming Language :: Python :: 3.10
|
|
15
|
+
Classifier: Programming Language :: Python :: 3.11
|
|
16
|
+
Classifier: Programming Language :: Python :: 3.12
|
|
17
|
+
Classifier: Programming Language :: Python :: 3.13
|
|
18
|
+
Classifier: Programming Language :: Python :: 3.14
|
|
19
|
+
Classifier: Programming Language :: Python :: Implementation :: CPython
|
|
20
|
+
Classifier: Programming Language :: Python :: Implementation :: PyPy
|
|
21
|
+
Requires-Python: >=3.9
|
|
22
|
+
Requires-Dist: httpx
|
|
23
|
+
Requires-Dist: packageurl-python
|
|
24
|
+
Provides-Extra: cli
|
|
25
|
+
Requires-Dist: rich; extra == 'cli'
|
|
26
|
+
Requires-Dist: typer-slim; extra == 'cli'
|
|
27
|
+
Provides-Extra: tests
|
|
28
|
+
Requires-Dist: pytest; extra == 'tests'
|
|
29
|
+
Requires-Dist: pytest-asyncio; extra == 'tests'
|
|
30
|
+
Requires-Dist: rich; extra == 'tests'
|
|
31
|
+
Requires-Dist: tomli; (python_version < '3.11') and extra == 'tests'
|
|
32
|
+
Requires-Dist: typer-slim; extra == 'tests'
|
|
33
|
+
Provides-Extra: types
|
|
34
|
+
Requires-Dist: mypy; extra == 'types'
|
|
35
|
+
Requires-Dist: pyrefly; extra == 'types'
|
|
36
|
+
Requires-Dist: pyright[nodejs]; extra == 'types'
|
|
37
|
+
Requires-Dist: pytest; extra == 'types'
|
|
38
|
+
Requires-Dist: pytest-asyncio; extra == 'types'
|
|
39
|
+
Requires-Dist: rich; extra == 'types'
|
|
40
|
+
Requires-Dist: tomli; (python_version < '3.11') and extra == 'types'
|
|
41
|
+
Requires-Dist: ty; extra == 'types'
|
|
42
|
+
Requires-Dist: typer-slim; extra == 'types'
|
|
43
|
+
Requires-Dist: typing-extensions; extra == 'types'
|
|
44
|
+
Description-Content-Type: text/markdown
|
|
45
|
+
|
|
46
|
+
# depsdev
|
|
47
|
+
|
|
48
|
+
[](https://pypi.org/project/depsdev)
|
|
49
|
+
[](https://pypi.org/project/depsdev)
|
|
50
|
+
[](https://results.pre-commit.ci/latest/github/FlavioAmurrioCS/depsdev/main)
|
|
51
|
+
|
|
52
|
+
-----
|
|
53
|
+
|
|
54
|
+
## Table of Contents
|
|
55
|
+
|
|
56
|
+
- [depsdev](#depsdev)
|
|
57
|
+
- [Table of Contents](#table-of-contents)
|
|
58
|
+
- [Overview](#overview)
|
|
59
|
+
- [Installation](#installation)
|
|
60
|
+
- [CLI Usage](#cli-usage)
|
|
61
|
+
- [Report mode](#report-mode)
|
|
62
|
+
- [License](#license)
|
|
63
|
+
|
|
64
|
+
## Overview
|
|
65
|
+
|
|
66
|
+
Thin Python wrapper (async-first) around the public [deps.dev REST API](https://deps.dev) plus an optional Typer-based CLI. Provides straightforward methods mapping closely to the documented endpoints; responses are returned as decoded JSON (dict / list). Alpha endpoints can be enabled via `DEPSDEV_V3_ALPHA=true` and may change without notice.
|
|
67
|
+
|
|
68
|
+
## Installation
|
|
69
|
+
|
|
70
|
+
```bash
|
|
71
|
+
pip install depsdev # library only
|
|
72
|
+
pipx install depsdev[cli] # CLI
|
|
73
|
+
uv tool install depsdev[cli] # CLI
|
|
74
|
+
```
|
|
75
|
+
|
|
76
|
+
## CLI Usage
|
|
77
|
+
|
|
78
|
+
```bash
|
|
79
|
+
[flavio@Mac ~/dev/github.com/FlavioAmurrioCS/depsdev][main ✗]
|
|
80
|
+
$ depsdev --help
|
|
81
|
+
|
|
82
|
+
Usage: depsdev [OPTIONS] COMMAND [ARGS]...
|
|
83
|
+
|
|
84
|
+
╭─ Options ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
|
|
85
|
+
│ --install-completion [bash|zsh|fish|powershell|pwsh] Install completion for the specified shell. │
|
|
86
|
+
│ --show-completion [bash|zsh|fish|powershell|pwsh] Show completion for the specified shell, to copy it or customize the installation. │
|
|
87
|
+
│ --help Show this message and exit. │
|
|
88
|
+
╰─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
|
|
89
|
+
╭─ Commands ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
|
|
90
|
+
│ report Show vulnerabilities for packages in a file. │
|
|
91
|
+
│ api A CLI tool to interact with the https://docs.deps.dev/api/ │
|
|
92
|
+
╰─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
|
|
93
|
+
╭─ Utils ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
|
|
94
|
+
│ purl Extract package URLs from various formats. │
|
|
95
|
+
│ vuln Main function to analyze packages for vulnerabilities. │
|
|
96
|
+
╰─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
|
|
97
|
+
|
|
98
|
+
```
|
|
99
|
+
|
|
100
|
+
### Report mode
|
|
101
|
+
|
|
102
|
+
Parses depedency file and reports the vulnerabilities and the version where it was fixed.
|
|
103
|
+
|
|
104
|
+
```bash
|
|
105
|
+
[flavio@Mac ~/dev/github.com/FlavioAmurrioCS/depsdev][main ✗]
|
|
106
|
+
$ depsdev report --help
|
|
107
|
+
|
|
108
|
+
Usage: depsdev report [OPTIONS] FILENAME
|
|
109
|
+
|
|
110
|
+
Show vulnerabilities for packages in a file.
|
|
111
|
+
|
|
112
|
+
Example usage:
|
|
113
|
+
depsdev report requirements.txt
|
|
114
|
+
depsdev report pom.xml
|
|
115
|
+
depsdev report Pipfile.lock
|
|
116
|
+
|
|
117
|
+
╭─ Arguments ────────────────────────────────────────────────╮
|
|
118
|
+
│ * filename TEXT [required] │
|
|
119
|
+
╰────────────────────────────────────────────────────────────╯
|
|
120
|
+
╭─ Options ──────────────────────────────────────────────────╮
|
|
121
|
+
│ --help Show this message and exit. │
|
|
122
|
+
╰────────────────────────────────────────────────────────────╯
|
|
123
|
+
|
|
124
|
+
[flavio@Mac ~/dev/github.com/FlavioAmurrioCS/depsdev][main ✗]
|
|
125
|
+
$ uv export > requirements.txt
|
|
126
|
+
Resolved 34 packages in 6ms
|
|
127
|
+
|
|
128
|
+
[flavio@Mac ~/dev/github.com/FlavioAmurrioCS/depsdev][main ✗]
|
|
129
|
+
$ depsdev report requirements.txt
|
|
130
|
+
Analysing 10 packages...
|
|
131
|
+
Found 1 packages with advisories.
|
|
132
|
+
pkg:pypi/idna@3.6
|
|
133
|
+
┏━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
|
|
134
|
+
┃ Id ┃ Summary ┃ Fixed ┃
|
|
135
|
+
┡━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┩
|
|
136
|
+
│ GHSA-jjg7-2v4v-x38h │ Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode │ 3.7 │
|
|
137
|
+
│ PYSEC-2024-60 │ │ 1d365e17e10d72d0b7876316fc7b9… │
|
|
138
|
+
└─────────────────────┴────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┴────────────────────────────────┘
|
|
139
|
+
```
|
|
140
|
+
|
|
141
|
+
## License
|
|
142
|
+
|
|
143
|
+
`depsdev` is distributed under the terms of the [MIT](https://spdx.org/licenses/MIT.html) license.
|
depsdev-0.0.5/README.md
ADDED
|
@@ -0,0 +1,98 @@
|
|
|
1
|
+
# depsdev
|
|
2
|
+
|
|
3
|
+
[](https://pypi.org/project/depsdev)
|
|
4
|
+
[](https://pypi.org/project/depsdev)
|
|
5
|
+
[](https://results.pre-commit.ci/latest/github/FlavioAmurrioCS/depsdev/main)
|
|
6
|
+
|
|
7
|
+
-----
|
|
8
|
+
|
|
9
|
+
## Table of Contents
|
|
10
|
+
|
|
11
|
+
- [depsdev](#depsdev)
|
|
12
|
+
- [Table of Contents](#table-of-contents)
|
|
13
|
+
- [Overview](#overview)
|
|
14
|
+
- [Installation](#installation)
|
|
15
|
+
- [CLI Usage](#cli-usage)
|
|
16
|
+
- [Report mode](#report-mode)
|
|
17
|
+
- [License](#license)
|
|
18
|
+
|
|
19
|
+
## Overview
|
|
20
|
+
|
|
21
|
+
Thin Python wrapper (async-first) around the public [deps.dev REST API](https://deps.dev) plus an optional Typer-based CLI. Provides straightforward methods mapping closely to the documented endpoints; responses are returned as decoded JSON (dict / list). Alpha endpoints can be enabled via `DEPSDEV_V3_ALPHA=true` and may change without notice.
|
|
22
|
+
|
|
23
|
+
## Installation
|
|
24
|
+
|
|
25
|
+
```bash
|
|
26
|
+
pip install depsdev # library only
|
|
27
|
+
pipx install depsdev[cli] # CLI
|
|
28
|
+
uv tool install depsdev[cli] # CLI
|
|
29
|
+
```
|
|
30
|
+
|
|
31
|
+
## CLI Usage
|
|
32
|
+
|
|
33
|
+
```bash
|
|
34
|
+
[flavio@Mac ~/dev/github.com/FlavioAmurrioCS/depsdev][main ✗]
|
|
35
|
+
$ depsdev --help
|
|
36
|
+
|
|
37
|
+
Usage: depsdev [OPTIONS] COMMAND [ARGS]...
|
|
38
|
+
|
|
39
|
+
╭─ Options ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
|
|
40
|
+
│ --install-completion [bash|zsh|fish|powershell|pwsh] Install completion for the specified shell. │
|
|
41
|
+
│ --show-completion [bash|zsh|fish|powershell|pwsh] Show completion for the specified shell, to copy it or customize the installation. │
|
|
42
|
+
│ --help Show this message and exit. │
|
|
43
|
+
╰─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
|
|
44
|
+
╭─ Commands ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
|
|
45
|
+
│ report Show vulnerabilities for packages in a file. │
|
|
46
|
+
│ api A CLI tool to interact with the https://docs.deps.dev/api/ │
|
|
47
|
+
╰─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
|
|
48
|
+
╭─ Utils ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
|
|
49
|
+
│ purl Extract package URLs from various formats. │
|
|
50
|
+
│ vuln Main function to analyze packages for vulnerabilities. │
|
|
51
|
+
╰─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
|
|
52
|
+
|
|
53
|
+
```
|
|
54
|
+
|
|
55
|
+
### Report mode
|
|
56
|
+
|
|
57
|
+
Parses depedency file and reports the vulnerabilities and the version where it was fixed.
|
|
58
|
+
|
|
59
|
+
```bash
|
|
60
|
+
[flavio@Mac ~/dev/github.com/FlavioAmurrioCS/depsdev][main ✗]
|
|
61
|
+
$ depsdev report --help
|
|
62
|
+
|
|
63
|
+
Usage: depsdev report [OPTIONS] FILENAME
|
|
64
|
+
|
|
65
|
+
Show vulnerabilities for packages in a file.
|
|
66
|
+
|
|
67
|
+
Example usage:
|
|
68
|
+
depsdev report requirements.txt
|
|
69
|
+
depsdev report pom.xml
|
|
70
|
+
depsdev report Pipfile.lock
|
|
71
|
+
|
|
72
|
+
╭─ Arguments ────────────────────────────────────────────────╮
|
|
73
|
+
│ * filename TEXT [required] │
|
|
74
|
+
╰────────────────────────────────────────────────────────────╯
|
|
75
|
+
╭─ Options ──────────────────────────────────────────────────╮
|
|
76
|
+
│ --help Show this message and exit. │
|
|
77
|
+
╰────────────────────────────────────────────────────────────╯
|
|
78
|
+
|
|
79
|
+
[flavio@Mac ~/dev/github.com/FlavioAmurrioCS/depsdev][main ✗]
|
|
80
|
+
$ uv export > requirements.txt
|
|
81
|
+
Resolved 34 packages in 6ms
|
|
82
|
+
|
|
83
|
+
[flavio@Mac ~/dev/github.com/FlavioAmurrioCS/depsdev][main ✗]
|
|
84
|
+
$ depsdev report requirements.txt
|
|
85
|
+
Analysing 10 packages...
|
|
86
|
+
Found 1 packages with advisories.
|
|
87
|
+
pkg:pypi/idna@3.6
|
|
88
|
+
┏━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
|
|
89
|
+
┃ Id ┃ Summary ┃ Fixed ┃
|
|
90
|
+
┡━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┩
|
|
91
|
+
│ GHSA-jjg7-2v4v-x38h │ Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode │ 3.7 │
|
|
92
|
+
│ PYSEC-2024-60 │ │ 1d365e17e10d72d0b7876316fc7b9… │
|
|
93
|
+
└─────────────────────┴────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┴────────────────────────────────┘
|
|
94
|
+
```
|
|
95
|
+
|
|
96
|
+
## License
|
|
97
|
+
|
|
98
|
+
`depsdev` is distributed under the terms of the [MIT](https://spdx.org/licenses/MIT.html) license.
|
|
@@ -170,6 +170,7 @@ async def report(filename: str) -> None:
|
|
|
170
170
|
depsdev report pom.xml
|
|
171
171
|
depsdev report Pipfile.lock
|
|
172
172
|
"""
|
|
173
|
+
filename = os.path.abspath(filename)
|
|
173
174
|
extractor = get_extractor(filename)
|
|
174
175
|
packages = extractor.extract(filename)
|
|
175
176
|
await main_helper([x.to_string() for x in packages])
|
|
@@ -1,7 +1,14 @@
|
|
|
1
1
|
# file generated by setuptools-scm
|
|
2
2
|
# don't change, don't track in version control
|
|
3
3
|
|
|
4
|
-
__all__ = [
|
|
4
|
+
__all__ = [
|
|
5
|
+
"__version__",
|
|
6
|
+
"__version_tuple__",
|
|
7
|
+
"version",
|
|
8
|
+
"version_tuple",
|
|
9
|
+
"__commit_id__",
|
|
10
|
+
"commit_id",
|
|
11
|
+
]
|
|
5
12
|
|
|
6
13
|
TYPE_CHECKING = False
|
|
7
14
|
if TYPE_CHECKING:
|
|
@@ -9,13 +16,19 @@ if TYPE_CHECKING:
|
|
|
9
16
|
from typing import Union
|
|
10
17
|
|
|
11
18
|
VERSION_TUPLE = Tuple[Union[int, str], ...]
|
|
19
|
+
COMMIT_ID = Union[str, None]
|
|
12
20
|
else:
|
|
13
21
|
VERSION_TUPLE = object
|
|
22
|
+
COMMIT_ID = object
|
|
14
23
|
|
|
15
24
|
version: str
|
|
16
25
|
__version__: str
|
|
17
26
|
__version_tuple__: VERSION_TUPLE
|
|
18
27
|
version_tuple: VERSION_TUPLE
|
|
28
|
+
commit_id: COMMIT_ID
|
|
29
|
+
__commit_id__: COMMIT_ID
|
|
19
30
|
|
|
20
|
-
__version__ = version = '0.0.
|
|
21
|
-
__version_tuple__ = version_tuple = (0, 0,
|
|
31
|
+
__version__ = version = '0.0.5'
|
|
32
|
+
__version_tuple__ = version_tuple = (0, 0, 5)
|
|
33
|
+
|
|
34
|
+
__commit_id__ = commit_id = None
|
|
@@ -48,7 +48,7 @@ class MavenExtractor:
|
|
|
48
48
|
"""
|
|
49
49
|
package, *rest = line.split()
|
|
50
50
|
_is_optional = bool(rest)
|
|
51
|
-
group, artifact, _type, version, *
|
|
51
|
+
group, artifact, _type, version, *_classifier = package.split(":")
|
|
52
52
|
return PackageURL(
|
|
53
53
|
type="maven",
|
|
54
54
|
namespace=group,
|
|
@@ -118,6 +118,7 @@ class RequirementsExtractor:
|
|
|
118
118
|
parts = _line.split(";")[0].split("==")
|
|
119
119
|
if len(parts) == 2: # noqa: PLR2004
|
|
120
120
|
name, version = parts
|
|
121
|
+
version = version.strip(" \\")
|
|
121
122
|
yield PackageURL(
|
|
122
123
|
type="pypi",
|
|
123
124
|
namespace=None,
|
|
@@ -64,7 +64,7 @@ async def main_helper(packages: list[str]) -> int:
|
|
|
64
64
|
for vuln in advisories:
|
|
65
65
|
table.add_row(
|
|
66
66
|
f"[link=https://github.com/advisories/{vuln['id']}]{vuln['id']}[/link]",
|
|
67
|
-
vuln
|
|
67
|
+
vuln.get("summary"),
|
|
68
68
|
get_version_fix(vuln) or "unknown",
|
|
69
69
|
)
|
|
70
70
|
console.print(table)
|
|
@@ -26,7 +26,7 @@ def entrypoints() -> Generator[tuple[str, str], None, None]:
|
|
|
26
26
|
|
|
27
27
|
@pytest.mark.parametrize("pair", entrypoints())
|
|
28
28
|
def test_help(pair: tuple[str, str]) -> None:
|
|
29
|
-
k,
|
|
29
|
+
k, _v = pair
|
|
30
30
|
result = subprocess.run([k, "--help"], check=False, capture_output=True, text=True) # noqa: S603
|
|
31
31
|
if result.returncode != 0:
|
|
32
32
|
logger.error(result.stderr)
|
depsdev-0.0.4/PKG-INFO
DELETED
|
@@ -1,73 +0,0 @@
|
|
|
1
|
-
Metadata-Version: 2.4
|
|
2
|
-
Name: depsdev
|
|
3
|
-
Version: 0.0.4
|
|
4
|
-
Summary: Python wrapper for https://deps.dev/ API
|
|
5
|
-
Project-URL: Documentation, https://github.com/FlavioAmurrioCS/depsdev#readme
|
|
6
|
-
Project-URL: Issues, https://github.com/FlavioAmurrioCS/depsdev/issues
|
|
7
|
-
Project-URL: Source, https://github.com/FlavioAmurrioCS/depsdev
|
|
8
|
-
Author-email: Flavio Amurrio <25621374+FlavioAmurrioCS@users.noreply.github.com>
|
|
9
|
-
License-Expression: MIT
|
|
10
|
-
License-File: LICENSE.txt
|
|
11
|
-
Classifier: Development Status :: 4 - Beta
|
|
12
|
-
Classifier: Programming Language :: Python
|
|
13
|
-
Classifier: Programming Language :: Python :: 3.9
|
|
14
|
-
Classifier: Programming Language :: Python :: 3.10
|
|
15
|
-
Classifier: Programming Language :: Python :: 3.11
|
|
16
|
-
Classifier: Programming Language :: Python :: 3.12
|
|
17
|
-
Classifier: Programming Language :: Python :: 3.13
|
|
18
|
-
Classifier: Programming Language :: Python :: 3.14
|
|
19
|
-
Classifier: Programming Language :: Python :: Implementation :: CPython
|
|
20
|
-
Classifier: Programming Language :: Python :: Implementation :: PyPy
|
|
21
|
-
Requires-Python: >=3.9
|
|
22
|
-
Requires-Dist: httpx
|
|
23
|
-
Requires-Dist: packageurl-python
|
|
24
|
-
Provides-Extra: cli
|
|
25
|
-
Requires-Dist: rich; extra == 'cli'
|
|
26
|
-
Requires-Dist: typer-slim; extra == 'cli'
|
|
27
|
-
Provides-Extra: tests
|
|
28
|
-
Requires-Dist: pytest; extra == 'tests'
|
|
29
|
-
Requires-Dist: pytest-asyncio; extra == 'tests'
|
|
30
|
-
Requires-Dist: rich; extra == 'tests'
|
|
31
|
-
Requires-Dist: tomli; (python_version < '3.11') and extra == 'tests'
|
|
32
|
-
Requires-Dist: typer-slim; extra == 'tests'
|
|
33
|
-
Provides-Extra: types
|
|
34
|
-
Requires-Dist: mypy; extra == 'types'
|
|
35
|
-
Requires-Dist: pyrefly; extra == 'types'
|
|
36
|
-
Requires-Dist: pyright[nodejs]; extra == 'types'
|
|
37
|
-
Requires-Dist: pytest; extra == 'types'
|
|
38
|
-
Requires-Dist: pytest-asyncio; extra == 'types'
|
|
39
|
-
Requires-Dist: rich; extra == 'types'
|
|
40
|
-
Requires-Dist: tomli; (python_version < '3.11') and extra == 'types'
|
|
41
|
-
Requires-Dist: ty; extra == 'types'
|
|
42
|
-
Requires-Dist: typer-slim; extra == 'types'
|
|
43
|
-
Requires-Dist: typing-extensions; extra == 'types'
|
|
44
|
-
Description-Content-Type: text/markdown
|
|
45
|
-
|
|
46
|
-
# depsdev
|
|
47
|
-
|
|
48
|
-
[](https://pypi.org/project/depsdev)
|
|
49
|
-
[](https://pypi.org/project/depsdev)
|
|
50
|
-
[](https://results.pre-commit.ci/latest/github/FlavioAmurrioCS/depsdev/main)
|
|
51
|
-
|
|
52
|
-
-----
|
|
53
|
-
|
|
54
|
-
## Table of Contents
|
|
55
|
-
|
|
56
|
-
- [Overview](#overview)
|
|
57
|
-
- [Installation](#installation)
|
|
58
|
-
- [License](#license)
|
|
59
|
-
|
|
60
|
-
## Overview
|
|
61
|
-
|
|
62
|
-
Thin Python wrapper (async-first) around the public [deps.dev REST API](https://deps.dev) plus an optional Typer-based CLI. Provides straightforward methods mapping closely to the documented endpoints; responses are returned as decoded JSON (dict / list). Alpha endpoints can be enabled via `DEPSDEV_V3_ALPHA=true` and may change without notice.
|
|
63
|
-
|
|
64
|
-
## Installation
|
|
65
|
-
|
|
66
|
-
```bash
|
|
67
|
-
pip install depsdev # library only
|
|
68
|
-
pip install depsdev[cli] # library + CLI
|
|
69
|
-
```
|
|
70
|
-
|
|
71
|
-
## License
|
|
72
|
-
|
|
73
|
-
`depsdev` is distributed under the terms of the [MIT](https://spdx.org/licenses/MIT.html) license.
|
depsdev-0.0.4/README.md
DELETED
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
# depsdev
|
|
2
|
-
|
|
3
|
-
[](https://pypi.org/project/depsdev)
|
|
4
|
-
[](https://pypi.org/project/depsdev)
|
|
5
|
-
[](https://results.pre-commit.ci/latest/github/FlavioAmurrioCS/depsdev/main)
|
|
6
|
-
|
|
7
|
-
-----
|
|
8
|
-
|
|
9
|
-
## Table of Contents
|
|
10
|
-
|
|
11
|
-
- [Overview](#overview)
|
|
12
|
-
- [Installation](#installation)
|
|
13
|
-
- [License](#license)
|
|
14
|
-
|
|
15
|
-
## Overview
|
|
16
|
-
|
|
17
|
-
Thin Python wrapper (async-first) around the public [deps.dev REST API](https://deps.dev) plus an optional Typer-based CLI. Provides straightforward methods mapping closely to the documented endpoints; responses are returned as decoded JSON (dict / list). Alpha endpoints can be enabled via `DEPSDEV_V3_ALPHA=true` and may change without notice.
|
|
18
|
-
|
|
19
|
-
## Installation
|
|
20
|
-
|
|
21
|
-
```bash
|
|
22
|
-
pip install depsdev # library only
|
|
23
|
-
pip install depsdev[cli] # library + CLI
|
|
24
|
-
```
|
|
25
|
-
|
|
26
|
-
## License
|
|
27
|
-
|
|
28
|
-
`depsdev` is distributed under the terms of the [MIT](https://spdx.org/licenses/MIT.html) license.
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|