pysentry-rs 0.3.2__tar.gz → 0.3.3__tar.gz

pysentry_rs-0.3.3/.pre-commit-hooks.yaml

@@ -0,0 +1,10 @@
+- id: pysentry
+  name: pysentry
+  description: "Fast security vulnerability scanner for Python dependencies"
+  entry: pysentry
+  language: python
+  always_run: true
+  additional_dependencies:
+    ["pysentry-rs==0.3.3", "uv==0.8.9", "pip-tools==7.5.0"]
+  minimum_pre_commit_version: "2.9.2"
+  types: [python]

{pysentry_rs-0.3.2 → pysentry_rs-0.3.3}/Cargo.lock

@@ -1121,7 +1121,7 @@ dependencies = [
 
 [[package]]
 name = "pysentry"
-version = "0.3.2"
+version = "0.3.3"
 dependencies = [
  "anyhow",
  "async-trait",

{pysentry_rs-0.3.2 → pysentry_rs-0.3.3}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "pysentry"
-version = "0.3.2"
+version = "0.3.3"
 edition = "2021"
 rust-version = "1.79"
 description = "Security vulnerability auditing for Python packages"

{pysentry_rs-0.3.2 → pysentry_rs-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pysentry-rs
-Version: 0.3.2
+Version: 0.3.3
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
@@ -287,6 +287,35 @@ pysentry --clear-resolution-cache --sources pypa,osv --format sarif
 pysentry --no-resolution-cache --format json --output security-report.json
 ```
 
+## Pre-commit Integration
+
+PySentry integrates seamlessly with [pre-commit](https://pre-commit.com/) to automatically scan for vulnerabilities before commits.
+
+### Setup
+
+Add PySentry to your `.pre-commit-config.yaml`:
+
+```yaml
+repos:
+  - repo: https://github.com/nyudenkov/pysentry
+    hooks:
+      - id: pysentry # default pysentry settings
+```
+
+### Advanced Configuration
+
+```yaml
+repos:
+  - repo: https://github.com/nyudenkov/pysentry
+    hooks:
+      - id: pysentry
+        args: ["--sources", "pypa,osv", "--fail-on", "high"]
+```
+
+### Installation Requirements
+
+Pre-commit will automatically install PySentry, uv and pip-tools via PyPI.
+
 ## Configuration
 
 PySentry supports TOML-based configuration files for persistent settings management. Configuration files follow a hierarchical discovery pattern:
@@ -330,33 +359,33 @@ ids = ["CVE-2023-12345", "GHSA-xxxx-yyyy-zzzz"]
 
 ### Environment Variables
 
-| Variable | Description | Example |
-|----------|-------------|---------|
-| `PYSENTRY_CONFIG` | Override config file path | `PYSENTRY_CONFIG=/path/to/config.toml` |
-| `PYSENTRY_NO_CONFIG` | Disable all config file loading | `PYSENTRY_NO_CONFIG=1` |
+| Variable             | Description                     | Example                                |
+| -------------------- | ------------------------------- | -------------------------------------- |
+| `PYSENTRY_CONFIG`    | Override config file path       | `PYSENTRY_CONFIG=/path/to/config.toml` |
+| `PYSENTRY_NO_CONFIG` | Disable all config file loading | `PYSENTRY_NO_CONFIG=1`                 |
 
 ### Command Line Options
 
-| Option                     | Description                                             | Default           |
-| -------------------------- | ------------------------------------------------------- | ----------------- |
-| `--format`                 | Output format: `human`, `json`, `sarif`, `markdown`     | `human`           |
-| `--severity`               | Minimum severity: `low`, `medium`, `high`, `critical`   | `low`             |
-| `--fail-on`                | Fail (exit non-zero) on vulnerabilities ≥ severity      | `medium`          |
-| `--sources`                | Vulnerability sources: `pypa`, `pypi`, `osv` (multiple) | `pypa`            |
-| `--all-extras`             | Include all dependencies (main + dev + optional)        | `false`           |
-| `--direct-only`            | Check only direct dependencies                          | `false`           |
-| `--detailed`               | Show full vulnerability descriptions instead of truncated| `false`           |
-| `--ignore`                 | Vulnerability IDs to ignore (repeatable)                | `[]`              |
-| `--output`                 | Output file path                                        | `stdout`          |
-| `--no-cache`               | Disable all caching                                     | `false`           |
-| `--cache-dir`              | Custom cache directory                                  | Platform-specific |
-| `--resolution-cache-ttl`   | Resolution cache TTL in hours                           | `24`              |
-| `--no-resolution-cache`    | Disable resolution caching only                         | `false`           |
-| `--clear-resolution-cache` | Clear resolution cache on startup                       | `false`           |
-| `--verbose`                | Enable verbose output                                   | `false`           |
-| `--quiet`                  | Suppress non-error output                               | `false`           |
-| `--resolver`               | Dependency resolver: `auto`, `uv`, `pip-tools`          | `auto`            |
-| `--requirements`           | Additional requirements files (repeatable)              | `[]`              |
+| Option                     | Description                                               | Default           |
+| -------------------------- | --------------------------------------------------------- | ----------------- |
+| `--format`                 | Output format: `human`, `json`, `sarif`, `markdown`       | `human`           |
+| `--severity`               | Minimum severity: `low`, `medium`, `high`, `critical`     | `low`             |
+| `--fail-on`                | Fail (exit non-zero) on vulnerabilities ≥ severity        | `medium`          |
+| `--sources`                | Vulnerability sources: `pypa`, `pypi`, `osv` (multiple)   | `pypa`            |
+| `--all-extras`             | Include all dependencies (main + dev + optional)          | `false`           |
+| `--direct-only`            | Check only direct dependencies                            | `false`           |
+| `--detailed`               | Show full vulnerability descriptions instead of truncated | `false`           |
+| `--ignore`                 | Vulnerability IDs to ignore (repeatable)                  | `[]`              |
+| `--output`                 | Output file path                                          | `stdout`          |
+| `--no-cache`               | Disable all caching                                       | `false`           |
+| `--cache-dir`              | Custom cache directory                                    | Platform-specific |
+| `--resolution-cache-ttl`   | Resolution cache TTL in hours                             | `24`              |
+| `--no-resolution-cache`    | Disable resolution caching only                           | `false`           |
+| `--clear-resolution-cache` | Clear resolution cache on startup                         | `false`           |
+| `--verbose`                | Enable verbose output                                     | `false`           |
+| `--quiet`                  | Suppress non-error output                                 | `false`           |
+| `--resolver`               | Dependency resolver: `auto`, `uv`, `pip-tools`            | `auto`            |
+| `--requirements`           | Additional requirements files (repeatable)                | `[]`              |
 
 ### Cache Management
 

{pysentry_rs-0.3.2 → pysentry_rs-0.3.3}/README.md

@@ -261,6 +261,35 @@ pysentry --clear-resolution-cache --sources pypa,osv --format sarif
 pysentry --no-resolution-cache --format json --output security-report.json
 ```
 
+## Pre-commit Integration
+
+PySentry integrates seamlessly with [pre-commit](https://pre-commit.com/) to automatically scan for vulnerabilities before commits.
+
+### Setup
+
+Add PySentry to your `.pre-commit-config.yaml`:
+
+```yaml
+repos:
+  - repo: https://github.com/nyudenkov/pysentry
+    hooks:
+      - id: pysentry # default pysentry settings
+```
+
+### Advanced Configuration
+
+```yaml
+repos:
+  - repo: https://github.com/nyudenkov/pysentry
+    hooks:
+      - id: pysentry
+        args: ["--sources", "pypa,osv", "--fail-on", "high"]
+```
+
+### Installation Requirements
+
+Pre-commit will automatically install PySentry, uv and pip-tools via PyPI.
+
 ## Configuration
 
 PySentry supports TOML-based configuration files for persistent settings management. Configuration files follow a hierarchical discovery pattern:
@@ -304,33 +333,33 @@ ids = ["CVE-2023-12345", "GHSA-xxxx-yyyy-zzzz"]
 
 ### Environment Variables
 
-| Variable | Description | Example |
-|----------|-------------|---------|
-| `PYSENTRY_CONFIG` | Override config file path | `PYSENTRY_CONFIG=/path/to/config.toml` |
-| `PYSENTRY_NO_CONFIG` | Disable all config file loading | `PYSENTRY_NO_CONFIG=1` |
+| Variable             | Description                     | Example                                |
+| -------------------- | ------------------------------- | -------------------------------------- |
+| `PYSENTRY_CONFIG`    | Override config file path       | `PYSENTRY_CONFIG=/path/to/config.toml` |
+| `PYSENTRY_NO_CONFIG` | Disable all config file loading | `PYSENTRY_NO_CONFIG=1`                 |
 
 ### Command Line Options
 
-| Option                     | Description                                             | Default           |
-| -------------------------- | ------------------------------------------------------- | ----------------- |
-| `--format`                 | Output format: `human`, `json`, `sarif`, `markdown`     | `human`           |
-| `--severity`               | Minimum severity: `low`, `medium`, `high`, `critical`   | `low`             |
-| `--fail-on`                | Fail (exit non-zero) on vulnerabilities ≥ severity      | `medium`          |
-| `--sources`                | Vulnerability sources: `pypa`, `pypi`, `osv` (multiple) | `pypa`            |
-| `--all-extras`             | Include all dependencies (main + dev + optional)        | `false`           |
-| `--direct-only`            | Check only direct dependencies                          | `false`           |
-| `--detailed`               | Show full vulnerability descriptions instead of truncated| `false`           |
-| `--ignore`                 | Vulnerability IDs to ignore (repeatable)                | `[]`              |
-| `--output`                 | Output file path                                        | `stdout`          |
-| `--no-cache`               | Disable all caching                                     | `false`           |
-| `--cache-dir`              | Custom cache directory                                  | Platform-specific |
-| `--resolution-cache-ttl`   | Resolution cache TTL in hours                           | `24`              |
-| `--no-resolution-cache`    | Disable resolution caching only                         | `false`           |
-| `--clear-resolution-cache` | Clear resolution cache on startup                       | `false`           |
-| `--verbose`                | Enable verbose output                                   | `false`           |
-| `--quiet`                  | Suppress non-error output                               | `false`           |
-| `--resolver`               | Dependency resolver: `auto`, `uv`, `pip-tools`          | `auto`            |
-| `--requirements`           | Additional requirements files (repeatable)              | `[]`              |
+| Option                     | Description                                               | Default           |
+| -------------------------- | --------------------------------------------------------- | ----------------- |
+| `--format`                 | Output format: `human`, `json`, `sarif`, `markdown`       | `human`           |
+| `--severity`               | Minimum severity: `low`, `medium`, `high`, `critical`     | `low`             |
+| `--fail-on`                | Fail (exit non-zero) on vulnerabilities ≥ severity        | `medium`          |
+| `--sources`                | Vulnerability sources: `pypa`, `pypi`, `osv` (multiple)   | `pypa`            |
+| `--all-extras`             | Include all dependencies (main + dev + optional)          | `false`           |
+| `--direct-only`            | Check only direct dependencies                            | `false`           |
+| `--detailed`               | Show full vulnerability descriptions instead of truncated | `false`           |
+| `--ignore`                 | Vulnerability IDs to ignore (repeatable)                  | `[]`              |
+| `--output`                 | Output file path                                          | `stdout`          |
+| `--no-cache`               | Disable all caching                                       | `false`           |
+| `--cache-dir`              | Custom cache directory                                    | Platform-specific |
+| `--resolution-cache-ttl`   | Resolution cache TTL in hours                             | `24`              |
+| `--no-resolution-cache`    | Disable resolution caching only                           | `false`           |
+| `--clear-resolution-cache` | Clear resolution cache on startup                         | `false`           |
+| `--verbose`                | Enable verbose output                                     | `false`           |
+| `--quiet`                  | Suppress non-error output                                 | `false`           |
+| `--resolver`               | Dependency resolver: `auto`, `uv`, `pip-tools`            | `auto`            |
+| `--requirements`           | Additional requirements files (repeatable)                | `[]`              |
 
 ### Cache Management
 

pysentry_rs-0.3.3/benchmarks/results/0.3.2.md

@@ -0,0 +1,141 @@
+# PySentry - pip-audit Benchmark Report
+
+**Generated:** 2025-08-13 12:12:39
+**Duration:** 1m 46.86s
+**Total Tests:** 20
+
+## Executive Summary
+
+**Overall Success Rate:** 100.0% (20/20 successful runs)
+
+### Small_Requirements Dataset - Cold Cache
+- **Fastest:** pysentry-pypi (0.179s) - 46.37x faster than slowest
+- **Memory Efficient:** pysentry-pypi (8.52 MB) - 12.47x less memory than highest
+
+### Small_Requirements Dataset - Hot Cache
+- **Fastest:** pysentry-pypi (0.163s) - 48.14x faster than slowest
+- **Memory Efficient:** pysentry-pypi (8.43 MB) - 11.45x less memory than highest
+
+### Large_Requirements Dataset - Cold Cache
+- **Fastest:** pysentry-pypi (0.642s) - 26.63x faster than slowest
+- **Memory Efficient:** pysentry-osv (10.42 MB) - 9.72x less memory than highest
+
+### Large_Requirements Dataset - Hot Cache
+- **Fastest:** pysentry-pypi (0.594s) - 25.42x faster than slowest
+- **Memory Efficient:** pysentry-pypi (8.40 MB) - 12.41x less memory than highest
+
+## Test Environment
+
+- **Platform:** Linux-6.11.0-1018-azure-x86_64-with-glibc2.39
+- **Python Version:** 3.11.13
+- **CPU Cores:** 4
+- **Total Memory:** 15.62 GB
+- **Available Memory:** 14.74 GB
+
+## Performance Comparison
+
+### Small_Requirements Dataset - Cold Cache
+
+#### Execution Time Comparison
+
+| Tool Configuration | Execution Time | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 0.179s | 1.00x |
+| 🥈 pysentry-all-sources | 1.024s | 5.71x |
+|  pysentry-osv | 1.051s | 5.86x |
+|  pysentry-pypa | 1.063s | 5.93x |
+|  pip-audit-default | 8.310s | 46.37x |
+
+#### Memory Usage Comparison
+
+| Tool Configuration | Peak Memory | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 8.52 MB | 1.00x |
+| 🥈 pysentry-osv | 10.50 MB | 1.23x |
+|  pip-audit-default | 45.38 MB | 5.32x |
+|  pysentry-pypa | 65.20 MB | 7.65x |
+|  pysentry-all-sources | 106.33 MB | 12.47x |
+
+### Small_Requirements Dataset - Hot Cache
+
+#### Execution Time Comparison
+
+| Tool Configuration | Execution Time | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 0.163s | 1.00x |
+| 🥈 pysentry-pypa | 0.651s | 3.99x |
+|  pysentry-osv | 0.811s | 4.98x |
+|  pysentry-all-sources | 0.980s | 6.01x |
+|  pip-audit-default | 7.849s | 48.14x |
+
+#### Memory Usage Comparison
+
+| Tool Configuration | Peak Memory | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 8.43 MB | 1.00x |
+| 🥈 pysentry-osv | 10.28 MB | 1.22x |
+|  pip-audit-default | 44.97 MB | 5.33x |
+|  pysentry-pypa | 67.79 MB | 8.04x |
+|  pysentry-all-sources | 96.55 MB | 11.45x |
+
+### Large_Requirements Dataset - Cold Cache
+
+#### Execution Time Comparison
+
+| Tool Configuration | Execution Time | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 0.642s | 1.00x |
+| 🥈 pysentry-pypa | 1.071s | 1.67x |
+|  pysentry-all-sources | 3.248s | 5.06x |
+|  pysentry-osv | 3.644s | 5.67x |
+|  pip-audit-default | 17.106s | 26.63x |
+
+#### Memory Usage Comparison
+
+| Tool Configuration | Peak Memory | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-osv | 10.42 MB | 1.00x |
+| 🥈 pysentry-pypi | 13.56 MB | 1.30x |
+|  pip-audit-default | 47.45 MB | 4.55x |
+|  pysentry-pypa | 64.17 MB | 6.16x |
+|  pysentry-all-sources | 101.29 MB | 9.72x |
+
+### Large_Requirements Dataset - Hot Cache
+
+#### Execution Time Comparison
+
+| Tool Configuration | Execution Time | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 0.594s | 1.00x |
+| 🥈 pysentry-pypa | 1.133s | 1.91x |
+|  pysentry-all-sources | 3.124s | 5.26x |
+|  pysentry-osv | 3.124s | 5.26x |
+|  pip-audit-default | 15.104s | 25.42x |
+
+#### Memory Usage Comparison
+
+| Tool Configuration | Peak Memory | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 8.40 MB | 1.00x |
+| 🥈 pysentry-osv | 10.40 MB | 1.24x |
+|  pip-audit-default | 47.29 MB | 5.63x |
+|  pysentry-pypa | 72.68 MB | 8.65x |
+|  pysentry-all-sources | 104.25 MB | 12.41x |
+
+## Detailed Analysis
+
+### Pysentry Performance
+
+- **Execution Time:** Avg: 1.406s, Min: 0.163s, Max: 3.644s
+
+- **Memory Usage:** Avg: 47.42 MB, Min: 8.40 MB, Max: 106.33 MB
+
+- **Success Rate:** 100.0% (16/16)
+
+### Pip-Audit Performance
+
+- **Execution Time:** Avg: 12.092s, Min: 7.849s, Max: 17.106s
+
+- **Memory Usage:** Avg: 46.27 MB, Min: 44.97 MB, Max: 47.45 MB
+
+- **Success Rate:** 100.0% (4/4)

pysentry_rs-0.3.3/benchmarks/results/latest.md

@@ -0,0 +1,141 @@
+# PySentry - pip-audit Benchmark Report
+
+**Generated:** 2025-08-13 12:12:39
+**Duration:** 1m 46.86s
+**Total Tests:** 20
+
+## Executive Summary
+
+**Overall Success Rate:** 100.0% (20/20 successful runs)
+
+### Small_Requirements Dataset - Cold Cache
+- **Fastest:** pysentry-pypi (0.179s) - 46.37x faster than slowest
+- **Memory Efficient:** pysentry-pypi (8.52 MB) - 12.47x less memory than highest
+
+### Small_Requirements Dataset - Hot Cache
+- **Fastest:** pysentry-pypi (0.163s) - 48.14x faster than slowest
+- **Memory Efficient:** pysentry-pypi (8.43 MB) - 11.45x less memory than highest
+
+### Large_Requirements Dataset - Cold Cache
+- **Fastest:** pysentry-pypi (0.642s) - 26.63x faster than slowest
+- **Memory Efficient:** pysentry-osv (10.42 MB) - 9.72x less memory than highest
+
+### Large_Requirements Dataset - Hot Cache
+- **Fastest:** pysentry-pypi (0.594s) - 25.42x faster than slowest
+- **Memory Efficient:** pysentry-pypi (8.40 MB) - 12.41x less memory than highest
+
+## Test Environment
+
+- **Platform:** Linux-6.11.0-1018-azure-x86_64-with-glibc2.39
+- **Python Version:** 3.11.13
+- **CPU Cores:** 4
+- **Total Memory:** 15.62 GB
+- **Available Memory:** 14.74 GB
+
+## Performance Comparison
+
+### Small_Requirements Dataset - Cold Cache
+
+#### Execution Time Comparison
+
+| Tool Configuration | Execution Time | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 0.179s | 1.00x |
+| 🥈 pysentry-all-sources | 1.024s | 5.71x |
+|  pysentry-osv | 1.051s | 5.86x |
+|  pysentry-pypa | 1.063s | 5.93x |
+|  pip-audit-default | 8.310s | 46.37x |
+
+#### Memory Usage Comparison
+
+| Tool Configuration | Peak Memory | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 8.52 MB | 1.00x |
+| 🥈 pysentry-osv | 10.50 MB | 1.23x |
+|  pip-audit-default | 45.38 MB | 5.32x |
+|  pysentry-pypa | 65.20 MB | 7.65x |
+|  pysentry-all-sources | 106.33 MB | 12.47x |
+
+### Small_Requirements Dataset - Hot Cache
+
+#### Execution Time Comparison
+
+| Tool Configuration | Execution Time | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 0.163s | 1.00x |
+| 🥈 pysentry-pypa | 0.651s | 3.99x |
+|  pysentry-osv | 0.811s | 4.98x |
+|  pysentry-all-sources | 0.980s | 6.01x |
+|  pip-audit-default | 7.849s | 48.14x |
+
+#### Memory Usage Comparison
+
+| Tool Configuration | Peak Memory | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 8.43 MB | 1.00x |
+| 🥈 pysentry-osv | 10.28 MB | 1.22x |
+|  pip-audit-default | 44.97 MB | 5.33x |
+|  pysentry-pypa | 67.79 MB | 8.04x |
+|  pysentry-all-sources | 96.55 MB | 11.45x |
+
+### Large_Requirements Dataset - Cold Cache
+
+#### Execution Time Comparison
+
+| Tool Configuration | Execution Time | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 0.642s | 1.00x |
+| 🥈 pysentry-pypa | 1.071s | 1.67x |
+|  pysentry-all-sources | 3.248s | 5.06x |
+|  pysentry-osv | 3.644s | 5.67x |
+|  pip-audit-default | 17.106s | 26.63x |
+
+#### Memory Usage Comparison
+
+| Tool Configuration | Peak Memory | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-osv | 10.42 MB | 1.00x |
+| 🥈 pysentry-pypi | 13.56 MB | 1.30x |
+|  pip-audit-default | 47.45 MB | 4.55x |
+|  pysentry-pypa | 64.17 MB | 6.16x |
+|  pysentry-all-sources | 101.29 MB | 9.72x |
+
+### Large_Requirements Dataset - Hot Cache
+
+#### Execution Time Comparison
+
+| Tool Configuration | Execution Time | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 0.594s | 1.00x |
+| 🥈 pysentry-pypa | 1.133s | 1.91x |
+|  pysentry-all-sources | 3.124s | 5.26x |
+|  pysentry-osv | 3.124s | 5.26x |
+|  pip-audit-default | 15.104s | 25.42x |
+
+#### Memory Usage Comparison
+
+| Tool Configuration | Peak Memory | Relative Performance |
+|---------------------|---------------------|---------------------|
+| 🥇 pysentry-pypi | 8.40 MB | 1.00x |
+| 🥈 pysentry-osv | 10.40 MB | 1.24x |
+|  pip-audit-default | 47.29 MB | 5.63x |
+|  pysentry-pypa | 72.68 MB | 8.65x |
+|  pysentry-all-sources | 104.25 MB | 12.41x |
+
+## Detailed Analysis
+
+### Pysentry Performance
+
+- **Execution Time:** Avg: 1.406s, Min: 0.163s, Max: 3.644s
+
+- **Memory Usage:** Avg: 47.42 MB, Min: 8.40 MB, Max: 106.33 MB
+
+- **Success Rate:** 100.0% (16/16)
+
+### Pip-Audit Performance
+
+- **Execution Time:** Avg: 12.092s, Min: 7.849s, Max: 17.106s
+
+- **Memory Usage:** Avg: 46.27 MB, Min: 44.97 MB, Max: 47.45 MB
+
+- **Success Rate:** 100.0% (4/4)

{pysentry_rs-0.3.2 → pysentry_rs-0.3.3}/src/parsers/pyproject.rs

@@ -29,12 +29,24 @@ use std::path::Path;
 use std::str::FromStr;
 use tracing::{debug, info, warn};
 
+#[derive(Debug, Deserialize, Clone)]
+#[serde(untagged)]
+enum DependencyGroupEntry {
+    /// A regular dependency specification string (PEP 508)
+    Dependency(String),
+    /// An include-group reference
+    IncludeGroup {
+        #[serde(rename = "include-group")]
+        include_group: String,
+    },
+}
+
 /// PyProject.toml structure for parsing dependencies
 #[derive(Debug, Deserialize)]
 struct PyProject {
     project: Option<Project>,
     #[serde(rename = "dependency-groups")]
-    dependency_groups: Option<HashMap<String, Vec<String>>>,
+    dependency_groups: Option<HashMap<String, Vec<DependencyGroupEntry>>>,
 }
 
 #[derive(Debug, Deserialize)]
@@ -482,6 +494,54 @@ impl ProjectParser for PyProjectParser {
 }
 
 impl PyProjectParser {
+    /// Resolve dependency group entries recursively, handling include-group references
+    #[allow(clippy::only_used_in_recursion)]
+    fn resolve_dependency_group_entries(
+        &self,
+        entries: &[DependencyGroupEntry],
+        dep_groups: &HashMap<String, Vec<DependencyGroupEntry>>,
+        _visited: &mut HashSet<String>,
+        current_path: &mut Vec<String>,
+    ) -> Result<Vec<String>> {
+        let mut resolved_deps = Vec::new();
+
+        for entry in entries {
+            match entry {
+                DependencyGroupEntry::Dependency(dep_str) => {
+                    resolved_deps.push(dep_str.clone());
+                }
+                DependencyGroupEntry::IncludeGroup { include_group } => {
+                    if current_path.contains(include_group) {
+                        return Err(AuditError::InvalidDependency(format!(
+                            "Circular dependency detected in include-group: {} -> {}",
+                            current_path.join(" -> "),
+                            include_group
+                        )));
+                    }
+
+                    if let Some(included_entries) = dep_groups.get(include_group) {
+                        current_path.push(include_group.clone());
+
+                        let included_deps = self.resolve_dependency_group_entries(
+                            included_entries,
+                            dep_groups,
+                            _visited,
+                            current_path,
+                        )?;
+
+                        resolved_deps.extend(included_deps);
+
+                        current_path.pop();
+                    } else {
+                        warn!("Referenced dependency group '{}' not found", include_group);
+                    }
+                }
+            }
+        }
+
+        Ok(resolved_deps)
+    }
+
     /// Get direct dependencies with their types and version specs from pyproject.toml
     fn get_direct_dependencies_with_info(
         &self,
@@ -538,17 +598,34 @@ impl PyProjectParser {
         // Add development dependencies if requested (PEP 735 dependency-groups)
         if include_dev {
             if let Some(dep_groups) = &pyproject.dependency_groups {
-                // Include all dependency groups for graph analysis
-                for (group_name, deps) in dep_groups {
+                // Resolve all dependency groups with include-group support
+                for (group_name, entries) in dep_groups {
                     debug!("Processing dependency group '{}' as Optional", group_name);
-                    for dep_str in deps {
-                        if let Ok(package_name) = self.extract_package_name_from_dep_string(dep_str)
-                        {
-                            // All dependency groups are classified as Optional
-                            deps_map.insert(
-                                dep_str.clone(),
-                                (package_name, DependencyType::Optional, dep_str.clone()),
-                            );
+
+                    let mut visited = HashSet::new();
+                    let mut current_path = Vec::new();
+
+                    match self.resolve_dependency_group_entries(
+                        entries,
+                        dep_groups,
+                        &mut visited,
+                        &mut current_path,
+                    ) {
+                        Ok(resolved_deps) => {
+                            for dep_str in resolved_deps {
+                                if let Ok(package_name) =
+                                    self.extract_package_name_from_dep_string(&dep_str)
+                                {
+                                    // All dependency groups are classified as Optional
+                                    deps_map.insert(
+                                        dep_str.clone(),
+                                        (package_name, DependencyType::Optional, dep_str.clone()),
+                                    );
+                                }
+                            }
+                        }
+                        Err(e) => {
+                            warn!("Failed to resolve dependency group '{}': {}", group_name, e);
                         }
                     }
                 }
@@ -950,4 +1027,283 @@ charset-normalizer==2.1.1
         );
         assert_eq!(dep_type, DependencyType::Main);
     }
+
+    #[test]
+    fn test_dependency_group_entry_deserialization() {
+        use serde_json;
+
+        let json = r#""pytest>=6.0""#;
+        let entry: DependencyGroupEntry = serde_json::from_str(json).unwrap();
+        match entry {
+            DependencyGroupEntry::Dependency(dep) => assert_eq!(dep, "pytest>=6.0"),
+            _ => panic!("Expected Dependency variant"),
+        }
+
+        let json = r#"{"include-group": "test"}"#;
+        let entry: DependencyGroupEntry = serde_json::from_str(json).unwrap();
+        match entry {
+            DependencyGroupEntry::IncludeGroup { include_group } => {
+                assert_eq!(include_group, "test")
+            }
+            _ => panic!("Expected IncludeGroup variant"),
+        }
+    }
+
+    #[test]
+    fn test_resolve_dependency_group_entries_simple() {
+        let parser = PyProjectParser::new(None);
+        let mut dep_groups = HashMap::new();
+
+        dep_groups.insert(
+            "test".to_string(),
+            vec![
+                DependencyGroupEntry::Dependency("pytest".to_string()),
+                DependencyGroupEntry::Dependency("coverage".to_string()),
+            ],
+        );
+
+        let mut visited = HashSet::new();
+        let mut current_path = Vec::new();
+
+        let result = parser
+            .resolve_dependency_group_entries(
+                &dep_groups["test"],
+                &dep_groups,
+                &mut visited,
+                &mut current_path,
+            )
+            .unwrap();
+
+        assert_eq!(result.len(), 2);
+        assert!(result.contains(&"pytest".to_string()));
+        assert!(result.contains(&"coverage".to_string()));
+    }
+
+    #[test]
+    fn test_resolve_dependency_group_entries_with_includes() {
+        let parser = PyProjectParser::new(None);
+        let mut dep_groups = HashMap::new();
+
+        dep_groups.insert(
+            "test".to_string(),
+            vec![
+                DependencyGroupEntry::Dependency("pytest".to_string()),
+                DependencyGroupEntry::Dependency("coverage".to_string()),
+            ],
+        );
+
+        dep_groups.insert(
+            "typing".to_string(),
+            vec![
+                DependencyGroupEntry::Dependency("mypy".to_string()),
+                DependencyGroupEntry::Dependency("types-requests".to_string()),
+            ],
+        );
+
+        dep_groups.insert(
+            "typing-test".to_string(),
+            vec![
+                DependencyGroupEntry::IncludeGroup {
+                    include_group: "typing".to_string(),
+                },
+                DependencyGroupEntry::IncludeGroup {
+                    include_group: "test".to_string(),
+                },
+                DependencyGroupEntry::Dependency("additional-dep".to_string()),
+            ],
+        );
+
+        let mut visited = HashSet::new();
+        let mut current_path = Vec::new();
+
+        let result = parser
+            .resolve_dependency_group_entries(
+                &dep_groups["typing-test"],
+                &dep_groups,
+                &mut visited,
+                &mut current_path,
+            )
+            .unwrap();
+
+        assert_eq!(result.len(), 5);
+        assert!(result.contains(&"mypy".to_string()));
+        assert!(result.contains(&"types-requests".to_string()));
+        assert!(result.contains(&"pytest".to_string()));
+        assert!(result.contains(&"coverage".to_string()));
+        assert!(result.contains(&"additional-dep".to_string()));
+    }
+
+    #[test]
+    fn test_resolve_dependency_group_entries_nested_includes() {
+        let parser = PyProjectParser::new(None);
+        let mut dep_groups = HashMap::new();
+
+        dep_groups.insert(
+            "base".to_string(),
+            vec![DependencyGroupEntry::Dependency("requests".to_string())],
+        );
+
+        dep_groups.insert(
+            "middleware".to_string(),
+            vec![
+                DependencyGroupEntry::IncludeGroup {
+                    include_group: "base".to_string(),
+                },
+                DependencyGroupEntry::Dependency("flask".to_string()),
+            ],
+        );
+
+        dep_groups.insert(
+            "full".to_string(),
+            vec![
+                DependencyGroupEntry::IncludeGroup {
+                    include_group: "middleware".to_string(),
+                },
+                DependencyGroupEntry::Dependency("pytest".to_string()),
+            ],
+        );
+
+        let mut visited = HashSet::new();
+        let mut current_path = Vec::new();
+
+        let result = parser
+            .resolve_dependency_group_entries(
+                &dep_groups["full"],
+                &dep_groups,
+                &mut visited,
+                &mut current_path,
+            )
+            .unwrap();
+
+        assert_eq!(result.len(), 3);
+        assert!(result.contains(&"requests".to_string()));
+        assert!(result.contains(&"flask".to_string()));
+        assert!(result.contains(&"pytest".to_string()));
+    }
+
+    #[test]
+    fn test_resolve_dependency_group_entries_cycle_detection() {
+        let parser = PyProjectParser::new(None);
+        let mut dep_groups = HashMap::new();
+
+        dep_groups.insert(
+            "a".to_string(),
+            vec![
+                DependencyGroupEntry::IncludeGroup {
+                    include_group: "b".to_string(),
+                },
+                DependencyGroupEntry::Dependency("dep-a".to_string()),
+            ],
+        );
+
+        dep_groups.insert(
+            "b".to_string(),
+            vec![
+                DependencyGroupEntry::IncludeGroup {
+                    include_group: "c".to_string(),
+                },
+                DependencyGroupEntry::Dependency("dep-b".to_string()),
+            ],
+        );
+
+        dep_groups.insert(
+            "c".to_string(),
+            vec![
+                DependencyGroupEntry::IncludeGroup {
+                    include_group: "a".to_string(),
+                },
+                DependencyGroupEntry::Dependency("dep-c".to_string()),
+            ],
+        );
+
+        let mut visited = HashSet::new();
+        let mut current_path = Vec::new();
+
+        let result = parser.resolve_dependency_group_entries(
+            &dep_groups["a"],
+            &dep_groups,
+            &mut visited,
+            &mut current_path,
+        );
+
+        assert!(result.is_err());
+        let error_msg = format!("{}", result.unwrap_err());
+        assert!(error_msg.contains("Circular dependency detected"));
+    }
+
+    #[test]
+    fn test_resolve_dependency_group_entries_missing_group() {
+        let parser = PyProjectParser::new(None);
+        let mut dep_groups = HashMap::new();
+
+        dep_groups.insert(
+            "test".to_string(),
+            vec![
+                DependencyGroupEntry::IncludeGroup {
+                    include_group: "missing".to_string(),
+                },
+                DependencyGroupEntry::Dependency("pytest".to_string()),
+            ],
+        );
+
+        let mut visited = HashSet::new();
+        let mut current_path = Vec::new();
+
+        let result = parser
+            .resolve_dependency_group_entries(
+                &dep_groups["test"],
+                &dep_groups,
+                &mut visited,
+                &mut current_path,
+            )
+            .unwrap();
+
+        assert_eq!(result.len(), 1);
+        assert!(result.contains(&"pytest".to_string()));
+    }
+
+    #[test]
+    fn test_pyproject_toml_with_include_groups() {
+        let toml_content = r#"
+[dependency-groups]
+test = ["pytest", "coverage"]
+typing = ["mypy", "types-requests"]
+typing-test = [
+    {include-group = "typing"},
+    {include-group = "test"},
+    "additional-dep"
+]
+"#;
+
+        let pyproject: PyProject = toml::from_str(toml_content).unwrap();
+        let dep_groups = pyproject.dependency_groups.unwrap();
+
+        assert_eq!(dep_groups.len(), 3);
+
+        let test_group = &dep_groups["test"];
+        assert_eq!(test_group.len(), 2);
+        match &test_group[0] {
+            DependencyGroupEntry::Dependency(dep) => assert_eq!(dep, "pytest"),
+            _ => panic!("Expected Dependency variant"),
+        }
+
+        let typing_test_group = &dep_groups["typing-test"];
+        assert_eq!(typing_test_group.len(), 3);
+        match &typing_test_group[0] {
+            DependencyGroupEntry::IncludeGroup { include_group } => {
+                assert_eq!(include_group, "typing")
+            }
+            _ => panic!("Expected IncludeGroup variant"),
+        }
+        match &typing_test_group[1] {
+            DependencyGroupEntry::IncludeGroup { include_group } => {
+                assert_eq!(include_group, "test")
+            }
+            _ => panic!("Expected IncludeGroup variant"),
+        }
+        match &typing_test_group[2] {
+            DependencyGroupEntry::Dependency(dep) => assert_eq!(dep, "additional-dep"),
+            _ => panic!("Expected Dependency variant"),
+        }
+    }
 }

pysentry_rs-0.3.2/benchmarks/results/latest.md

@@ -1,141 +0,0 @@
-# PySentry - pip-audit Benchmark Report
-
-**Generated:** 2025-08-12 18:55:26
-**Duration:** 1m 54.40s
-**Total Tests:** 20
-
-## Executive Summary
-
-**Overall Success Rate:** 100.0% (20/20 successful runs)
-
-### Small_Requirements Dataset - Cold Cache
-- **Fastest:** pysentry-pypi (0.213s) - 42.00x faster than slowest
-- **Memory Efficient:** pysentry-osv (10.02 MB) - 10.69x less memory than highest
-
-### Small_Requirements Dataset - Hot Cache
-- **Fastest:** pysentry-pypi (0.223s) - 35.50x faster than slowest
-- **Memory Efficient:** pysentry-osv (10.18 MB) - 9.89x less memory than highest
-
-### Large_Requirements Dataset - Cold Cache
-- **Fastest:** pysentry-pypi (0.679s) - 28.20x faster than slowest
-- **Memory Efficient:** pysentry-osv (10.27 MB) - 10.21x less memory than highest
-
-### Large_Requirements Dataset - Hot Cache
-- **Fastest:** pysentry-pypi (0.692s) - 23.06x faster than slowest
-- **Memory Efficient:** pysentry-pypi (9.86 MB) - 9.55x less memory than highest
-
-## Test Environment
-
-- **Platform:** Linux-6.11.0-1018-azure-x86_64-with-glibc2.39
-- **Python Version:** 3.11.13
-- **CPU Cores:** 4
-- **Total Memory:** 15.62 GB
-- **Available Memory:** 14.60 GB
-
-## Performance Comparison
-
-### Small_Requirements Dataset - Cold Cache
-
-#### Execution Time Comparison
-
-| Tool Configuration | Execution Time | Relative Performance |
-|---------------------|---------------------|---------------------|
-| 🥇 pysentry-pypi | 0.213s | 1.00x |
-| 🥈 pysentry-pypa | 1.004s | 4.71x |
-|  pysentry-osv | 1.006s | 4.72x |
-|  pysentry-all-sources | 1.013s | 4.75x |
-|  pip-audit-default | 8.951s | 42.00x |
-
-#### Memory Usage Comparison
-
-| Tool Configuration | Peak Memory | Relative Performance |
-|---------------------|---------------------|---------------------|
-| 🥇 pysentry-osv | 10.02 MB | 1.00x |
-| 🥈 pysentry-pypi | 11.68 MB | 1.17x |
-|  pip-audit-default | 45.42 MB | 4.53x |
-|  pysentry-pypa | 52.72 MB | 5.26x |
-|  pysentry-all-sources | 107.07 MB | 10.69x |
-
-### Small_Requirements Dataset - Hot Cache
-
-#### Execution Time Comparison
-
-| Tool Configuration | Execution Time | Relative Performance |
-|---------------------|---------------------|---------------------|
-| 🥇 pysentry-pypi | 0.223s | 1.00x |
-| 🥈 pysentry-pypa | 0.723s | 3.24x |
-|  pysentry-osv | 0.969s | 4.34x |
-|  pysentry-all-sources | 1.037s | 4.65x |
-|  pip-audit-default | 7.922s | 35.50x |
-
-#### Memory Usage Comparison
-
-| Tool Configuration | Peak Memory | Relative Performance |
-|---------------------|---------------------|---------------------|
-| 🥇 pysentry-osv | 10.18 MB | 1.00x |
-| 🥈 pysentry-pypi | 10.59 MB | 1.04x |
-|  pip-audit-default | 44.28 MB | 4.35x |
-|  pysentry-pypa | 73.74 MB | 7.24x |
-|  pysentry-all-sources | 100.68 MB | 9.89x |
-
-### Large_Requirements Dataset - Cold Cache
-
-#### Execution Time Comparison
-
-| Tool Configuration | Execution Time | Relative Performance |
-|---------------------|---------------------|---------------------|
-| 🥇 pysentry-pypi | 0.679s | 1.00x |
-| 🥈 pysentry-pypa | 1.142s | 1.68x |
-|  pysentry-osv | 3.365s | 4.95x |
-|  pysentry-all-sources | 3.649s | 5.37x |
-|  pip-audit-default | 19.161s | 28.20x |
-
-#### Memory Usage Comparison
-
-| Tool Configuration | Peak Memory | Relative Performance |
-|---------------------|---------------------|---------------------|
-| 🥇 pysentry-osv | 10.27 MB | 1.00x |
-| 🥈 pysentry-pypi | 10.36 MB | 1.01x |
-|  pip-audit-default | 47.43 MB | 4.62x |
-|  pysentry-pypa | 70.21 MB | 6.84x |
-|  pysentry-all-sources | 104.85 MB | 10.21x |
-
-### Large_Requirements Dataset - Hot Cache
-
-#### Execution Time Comparison
-
-| Tool Configuration | Execution Time | Relative Performance |
-|---------------------|---------------------|---------------------|
-| 🥇 pysentry-pypi | 0.692s | 1.00x |
-| 🥈 pysentry-pypa | 1.119s | 1.62x |
-|  pysentry-osv | 2.963s | 4.28x |
-|  pysentry-all-sources | 4.382s | 6.33x |
-|  pip-audit-default | 15.954s | 23.06x |
-
-#### Memory Usage Comparison
-
-| Tool Configuration | Peak Memory | Relative Performance |
-|---------------------|---------------------|---------------------|
-| 🥇 pysentry-pypi | 9.86 MB | 1.00x |
-| 🥈 pysentry-osv | 10.14 MB | 1.03x |
-|  pip-audit-default | 47.00 MB | 4.77x |
-|  pysentry-pypa | 73.75 MB | 7.48x |
-|  pysentry-all-sources | 94.11 MB | 9.55x |
-
-## Detailed Analysis
-
-### Pysentry Performance
-
-- **Execution Time:** Avg: 1.511s, Min: 0.213s, Max: 4.382s
-
-- **Memory Usage:** Avg: 47.51 MB, Min: 9.86 MB, Max: 107.07 MB
-
-- **Success Rate:** 100.0% (16/16)
-
-### Pip-Audit Performance
-
-- **Execution Time:** Avg: 12.997s, Min: 7.922s, Max: 19.161s
-
-- **Memory Usage:** Avg: 46.03 MB, Min: 44.28 MB, Max: 47.43 MB
-
-- **Success Rate:** 100.0% (4/4)