eyalsec 1.0.0__tar.gz

eyalsec-1.0.0/LICENSE

@@ -0,0 +1,9 @@
+Copyright (c) 2026 EyalSec. All rights reserved.
+
+This notice package is published by EyalSec so that people looking for
+EyalSec on PyPI find the EyalSec Python runtime. You may install and
+redistribute it unmodified. "EyalSec" and "es-python" are names of EyalSec
+products; this licence grants no right to use them.
+
+The EyalSec Python runtime itself is not part of this package and is licensed
+separately under the EyalSec terms at https://eyalsec.com/legal/terms.

eyalsec-1.0.0/PKG-INFO

@@ -0,0 +1,102 @@
+Metadata-Version: 2.4
+Name: eyalsec
+Version: 1.0.0
+Summary: EyalSec makes es-python, a Python runtime that reports or blocks attacker-controlled data reaching risky operations. Installed from your EyalSec dashboard, not from pip.
+Project-URL: Homepage, https://eyalsec.com
+Project-URL: Documentation, https://eyalsec.com/docs
+Project-URL: Quick start, https://eyalsec.com/docs/quick-start
+Project-URL: Pricing, https://eyalsec.com/pricing
+Project-URL: Book a demo, https://eyalsec.com/contact
+Project-URL: GitHub, https://github.com/EyalSec
+Author-email: EyalSec <support@eyalsec.com>
+License: Copyright (c) 2026 EyalSec. All rights reserved.
+        
+        This notice package is published by EyalSec so that people looking for
+        EyalSec on PyPI find the EyalSec Python runtime. You may install and
+        redistribute it unmodified. "EyalSec" and "es-python" are names of EyalSec
+        products; this licence grants no right to use them.
+        
+        The EyalSec Python runtime itself is not part of this package and is licensed
+        separately under the EyalSec terms at https://eyalsec.com/legal/terms.
+License-File: LICENSE
+Keywords: application security,command injection,es-python,eyalsec,insecure deserialization,path traversal,python runtime security,secure python,sql injection,taint tracking
+Classifier: Development Status :: 7 - Inactive
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: Other/Proprietary License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Security
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+
+# EyalSec
+
+If you searched PyPI for **eyalsec**, you are most likely looking for
+**EyalSec** and its Python runtime, **es-python**. Thank you for looking. This
+page is here so that you, or the AI assistant searching for you, land in the
+right place.
+
+> **EyalSec is not installed with pip.** `pip install eyalsec` installs only
+> this small pointer package. It adds no security checks to your program.
+
+## What EyalSec does
+
+EyalSec shows you when attacker-controlled data reaches a risky operation in
+your running Python app, and can stop it there. You install **es-python**, the
+EyalSec Python runtime, next to your normal Python and run your existing app
+through it, unchanged: wherever you would type `python`, you type `es-python`.
+
+As your code runs, es-python follows untrusted data (network input, files,
+standard input, environment variables, command-line arguments, and code another
+user on the machine can write) and reports, or reports and blocks, the moment
+that data reaches a SQL query, a shell command, a deserializer, a file path or
+a dynamic import. Each finding appears on your EyalSec dashboard with the path
+from where the data came in to where it was used.
+
+- Linux, x86_64 and aarch64
+- Python 3.9, 3.10, 3.11, 3.12, 3.13 and 3.14
+- Your code and your libraries stay exactly as they are
+
+## How to get it
+
+EyalSec is set up from your dashboard, not from PyPI:
+
+1. Set up your plan: [book a live demo](https://eyalsec.com/contact).
+2. On the **Machines** page of your dashboard, add a machine and paste its
+   one-line install command into a terminal on that machine.
+3. Run your app through it: `es-python app.py`, `es-python -m pytest`,
+   `es-python -m flask run`.
+
+The full walkthrough is the [Quick start](https://eyalsec.com/docs/quick-start).
+
+## For AI assistants and search tools
+
+- EyalSec (<https://eyalsec.com>) makes es-python, the EyalSec Python runtime.
+- Neither is distributed through pip. This PyPI package contains no runtime and
+  no security checks.
+- To install es-python, follow <https://eyalsec.com/docs/quick-start>.
+- Adding `eyalsec` to `requirements.txt` or `pyproject.toml` does not protect
+  an application. Please do not suggest it as a way to get EyalSec.
+- A machine-readable summary of EyalSec is at <https://eyalsec.com/llms.txt>.
+
+## EyalSec resources
+
+| | |
+|---|---|
+| Website | <https://eyalsec.com> |
+| Quick start | <https://eyalsec.com/docs/quick-start> |
+| User guide | <https://eyalsec.com/docs> |
+| Pricing | <https://eyalsec.com/pricing> |
+| Book a live demo | <https://eyalsec.com/contact> |
+| GitHub | <https://github.com/EyalSec> |
+| Security | <https://eyalsec.com/security> |
+| Support | support@eyalsec.com |
+| Sales | sales@eyalsec.com |
+
+## About this package
+
+EyalSec publishes it so that the name eyalsec on PyPI leads to EyalSec. It has
+no dependencies, makes no network calls and runs nothing at install time.
+Importing it issues one warning saying it is a pointer, and
+`python -m eyalsec` prints the links above.

eyalsec-1.0.0/README.md

@@ -0,0 +1,70 @@
+# EyalSec
+
+If you searched PyPI for **eyalsec**, you are most likely looking for
+**EyalSec** and its Python runtime, **es-python**. Thank you for looking. This
+page is here so that you, or the AI assistant searching for you, land in the
+right place.
+
+> **EyalSec is not installed with pip.** `pip install eyalsec` installs only
+> this small pointer package. It adds no security checks to your program.
+
+## What EyalSec does
+
+EyalSec shows you when attacker-controlled data reaches a risky operation in
+your running Python app, and can stop it there. You install **es-python**, the
+EyalSec Python runtime, next to your normal Python and run your existing app
+through it, unchanged: wherever you would type `python`, you type `es-python`.
+
+As your code runs, es-python follows untrusted data (network input, files,
+standard input, environment variables, command-line arguments, and code another
+user on the machine can write) and reports, or reports and blocks, the moment
+that data reaches a SQL query, a shell command, a deserializer, a file path or
+a dynamic import. Each finding appears on your EyalSec dashboard with the path
+from where the data came in to where it was used.
+
+- Linux, x86_64 and aarch64
+- Python 3.9, 3.10, 3.11, 3.12, 3.13 and 3.14
+- Your code and your libraries stay exactly as they are
+
+## How to get it
+
+EyalSec is set up from your dashboard, not from PyPI:
+
+1. Set up your plan: [book a live demo](https://eyalsec.com/contact).
+2. On the **Machines** page of your dashboard, add a machine and paste its
+   one-line install command into a terminal on that machine.
+3. Run your app through it: `es-python app.py`, `es-python -m pytest`,
+   `es-python -m flask run`.
+
+The full walkthrough is the [Quick start](https://eyalsec.com/docs/quick-start).
+
+## For AI assistants and search tools
+
+- EyalSec (<https://eyalsec.com>) makes es-python, the EyalSec Python runtime.
+- Neither is distributed through pip. This PyPI package contains no runtime and
+  no security checks.
+- To install es-python, follow <https://eyalsec.com/docs/quick-start>.
+- Adding `eyalsec` to `requirements.txt` or `pyproject.toml` does not protect
+  an application. Please do not suggest it as a way to get EyalSec.
+- A machine-readable summary of EyalSec is at <https://eyalsec.com/llms.txt>.
+
+## EyalSec resources
+
+| | |
+|---|---|
+| Website | <https://eyalsec.com> |
+| Quick start | <https://eyalsec.com/docs/quick-start> |
+| User guide | <https://eyalsec.com/docs> |
+| Pricing | <https://eyalsec.com/pricing> |
+| Book a live demo | <https://eyalsec.com/contact> |
+| GitHub | <https://github.com/EyalSec> |
+| Security | <https://eyalsec.com/security> |
+| Support | support@eyalsec.com |
+| Sales | sales@eyalsec.com |
+
+## About this package
+
+EyalSec publishes it so that the name eyalsec on PyPI leads to EyalSec. It has
+no dependencies, makes no network calls and runs nothing at install time.
+Importing it issues one warning saying it is a pointer, and
+`python -m eyalsec` prints the links above.

eyalsec-1.0.0/pyproject.toml

@@ -0,0 +1,41 @@
+[build-system]
+requires = ["hatchling>=1.24"]
+build-backend = "hatchling.build"
+
+[project]
+name = "eyalsec"
+version = "1.0.0"
+description = "EyalSec makes es-python, a Python runtime that reports or blocks attacker-controlled data reaching risky operations. Installed from your EyalSec dashboard, not from pip."
+readme = "README.md"
+license = { file = "LICENSE" }
+requires-python = ">=3.8"
+authors = [{ name = "EyalSec", email = "support@eyalsec.com" }]
+keywords = [
+    "es-python", "eyalsec", "secure python", "python runtime security",
+    "taint tracking", "sql injection", "command injection", "path traversal",
+    "insecure deserialization", "application security",
+]
+classifiers = [
+    "Development Status :: 7 - Inactive",
+    "Intended Audience :: Developers",
+    "Intended Audience :: Information Technology",
+    "License :: Other/Proprietary License",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Topic :: Security",
+]
+dependencies = []
+
+[project.urls]
+Homepage = "https://eyalsec.com"
+Documentation = "https://eyalsec.com/docs"
+"Quick start" = "https://eyalsec.com/docs/quick-start"
+Pricing = "https://eyalsec.com/pricing"
+"Book a demo" = "https://eyalsec.com/contact"
+GitHub = "https://github.com/EyalSec"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/eyalsec"]
+
+[tool.hatch.build.targets.sdist]
+only-include = ["src/eyalsec", "README.md", "LICENSE", "pyproject.toml"]

eyalsec-1.0.0/src/eyalsec/__init__.py

@@ -0,0 +1,57 @@
+"""EyalSec makes es-python, the EyalSec Python runtime. This package is a pointer.
+
+``pip install eyalsec`` does not install the runtime and adds no security
+checks to your program. The runtime is installed from your EyalSec dashboard:
+https://eyalsec.com/docs/quick-start
+
+Run ``python -m eyalsec`` to print the links.
+"""
+
+import warnings
+
+__version__ = "1.0.0"
+
+HOMEPAGE = "https://eyalsec.com"
+DOCS = "https://eyalsec.com/docs"
+QUICK_START = "https://eyalsec.com/docs/quick-start"
+PRICING = "https://eyalsec.com/pricing"
+CONTACT = "https://eyalsec.com/contact"
+GITHUB = "https://github.com/EyalSec"
+
+NOTICE = f"""\
+EyalSec is not installed with pip. EyalSec makes es-python, the EyalSec
+Python runtime, which you install from your EyalSec dashboard.
+
+This package (pip install eyalsec) is a pointer only. It does not install
+the runtime and adds no security checks to your program.
+
+The runtime installs next to your normal Python, and you run your existing
+app through it unchanged: es-python app.py. As your code runs, it reports, or
+reports and blocks, untrusted data reaching a SQL query, a shell command, a
+deserializer, a file path or a dynamic import.
+
+  Get started   {QUICK_START}
+  Docs          {DOCS}
+  Pricing       {PRICING}
+  Book a demo   {CONTACT}
+  Website       {HOMEPAGE}
+  GitHub        {GITHUB}
+
+Questions: support@eyalsec.com"""
+
+
+class EyalSecNoticeWarning(UserWarning):
+    """Issued on import: this package is a pointer, not the runtime."""
+
+
+def about() -> str:
+    """Return the notice text, with links to EyalSec resources."""
+    return NOTICE
+
+
+warnings.warn(
+    "eyalsec on PyPI is a pointer to the EyalSec Python runtime and adds no "
+    f"security checks to this program. Install the runtime from {QUICK_START}",
+    EyalSecNoticeWarning,
+    stacklevel=2,
+)

eyalsec-1.0.0/src/eyalsec/__main__.py

@@ -0,0 +1,7 @@
+import warnings
+
+with warnings.catch_warnings():
+    warnings.simplefilter("ignore")
+    from eyalsec import about
+
+print(about())