pysentry-rs 0.3.4__cp313-cp313-macosx_11_0_arm64.whl → 0.3.5__cp313-cp313-macosx_11_0_arm64.whl

{pysentry_rs-0.3.4.dist-info → pysentry_rs-0.3.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pysentry-rs
-Version: 0.3.4
+Version: 0.3.5
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
@@ -30,15 +30,17 @@ Project-URL: Issues, https://github.com/nyudenkov/pysentry/issues
 
 [Help to test and improve](https://github.com/nyudenkov/pysentry/issues/12) | [Latest PySentry - pip-audit benchmark](benchmarks/results/latest.md)
 
+Please, send feedback to nikita@pysentry.com
+
 A fast, reliable security vulnerability scanner for Python projects, written in Rust.
 
 ## Overview
 
-PySentry audits Python projects for known security vulnerabilities by analyzing dependency files (`uv.lock`, `poetry.lock`, `pyproject.toml`, `requirements.txt`) and cross-referencing them against multiple vulnerability databases. It provides comprehensive reporting with support for various output formats and filtering options.
+PySentry audits Python projects for known security vulnerabilities by analyzing dependency files (`uv.lock`, `poetry.lock`, `Pipfile.lock`, `pyproject.toml`, `Pipfile`, `requirements.txt`) and cross-referencing them against multiple vulnerability databases. It provides comprehensive reporting with support for various output formats and filtering options.
 
 ## Key Features
 
-- **Multiple Project Formats**: Supports `uv.lock`, `poetry.lock`, `pyproject.toml`, and `requirements.txt` files
+- **Multiple Project Formats**: Supports `uv.lock`, `poetry.lock`, `Pipfile.lock`, `pyproject.toml`, `Pipfile`, and `requirements.txt` files
 - **External Resolver Integration**: Leverages `uv` and `pip-tools` for accurate requirements.txt constraint solving
 - **Multiple Data Sources**:
   - PyPA Advisory Database (default)
@@ -191,7 +193,7 @@ uvx pysentry-rs /path/to/python/project
 pysentry
 pysentry /path/to/python/project
 
-# Automatically detects project type (uv.lock, poetry.lock, pyproject.toml, requirements.txt)
+# Automatically detects project type (uv.lock, poetry.lock, Pipfile.lock, pyproject.toml, Pipfile, requirements.txt)
 pysentry /path/to/project
 
 # Force specific resolver
@@ -494,6 +496,46 @@ Full support for Poetry lock files:
 - Handles Poetry's dependency groups and optional dependencies
 - Perfect for Poetry-managed projects with established lock files
 
+### Pipfile.lock Files
+
+Full support for Pipenv lock files with exact version resolution:
+
+- **Exact Version Resolution**: Scans exact dependency versions locked by Pipenv
+- **Lock-File Only Analysis**: Relies purely on the lock file structure, no Pipfile parsing needed
+- **Complete Dependency Tree**: Analyzes all resolved dependencies including transitive ones
+- **Dependency Classification**: Distinguishes between default dependencies and development groups
+
+**Key Features:**
+
+- No external tools required
+- Fast parsing with exact version information
+- Handles Pipenv's dependency groups (default and develop)
+- Perfect for Pipenv-managed projects with established lock files
+
+### Pipfile Files (External Resolution)
+
+Support for Pipfile specification files using external dependency resolvers:
+
+**Key Features:**
+
+- **Dependencies Resolution**: Converts version constraints from Pipfile to exact versions using mature external tools
+- **Multiple Resolver Support**:
+  - **uv**: Rust-based resolver, extremely fast and reliable (recommended)
+  - **pip-tools**: Python-based resolver using `pip-compile`, widely compatible
+- **Auto-detection**: Automatically detects and uses the best available resolver in your environment
+- **Dependency Groups**: Supports both default packages and dev-packages sections
+- **Complex Constraint Handling**: Supports version ranges, Git dependencies, and environment markers
+
+**Resolution Workflow:**
+
+1. Detects `Pipfile` in your project (when `Pipfile.lock` is not present)
+2. Auto-detects available resolver (`uv` or `pip-tools`) in current environment
+3. Resolves version constraints to exact dependency versions
+4. Scans resolved dependencies for vulnerabilities
+5. Reports findings with dependency group classification
+
+**Note**: When both `Pipfile` and `Pipfile.lock` are present, PySentry prioritizes the lock file for better accuracy. Consider using `pipenv lock` to generate a lock file for the most precise vulnerability scanning.
+
 ### requirements.txt Files (External Resolution)
 
 Advanced support for `requirements.txt` files using external dependency resolvers:
@@ -732,7 +774,7 @@ pysentry /path/to/python/project
 pysentry --requirements requirements-dev.txt --requirements requirements-test.txt
 
 # Check if higher-priority files exist (they take precedence)
-ls uv.lock poetry.lock pyproject.toml
+ls uv.lock poetry.lock Pipfile.lock pyproject.toml Pipfile requirements.txt
 ```
 
 **Performance Issues**

pysentry_rs-0.3.5.dist-info/RECORD

@@ -0,0 +1,7 @@
+pysentry/__init__.py,sha256=uSo2bKZNbcRd1bEXOzF3MuxrEapECowrIHG0t_DERa8,611
+pysentry/_internal.cpython-313-darwin.so,sha256=Pv4858NNyYmbb5u_PP66oQmMqobgsp-0PSrROzaQl7A,10590976
+pysentry_rs-0.3.5.dist-info/METADATA,sha256=2e0z2RA2NN3R-aGC_rMk5m66hA1gNGUn8yGPZgrb184,27537
+pysentry_rs-0.3.5.dist-info/WHEEL,sha256=BEq5B3wYswoCWPV13YmTFE5pEXWgkinJwNC6mhIE-oI,104
+pysentry_rs-0.3.5.dist-info/entry_points.txt,sha256=3bJguekVEbXTn-ceDCWJaSIZScquPPP1Ux9TPVHHanE,44
+pysentry_rs-0.3.5.dist-info/licenses/LICENSE,sha256=TAMtDCoJuavXz7pCEklrzjH55sdvsy5gKsXY9NsImwY,34878
+pysentry_rs-0.3.5.dist-info/RECORD,,

pysentry_rs-0.3.4.dist-info/RECORD

@@ -1,7 +0,0 @@
-pysentry/__init__.py,sha256=uSo2bKZNbcRd1bEXOzF3MuxrEapECowrIHG0t_DERa8,611
-pysentry/_internal.cpython-313-darwin.so,sha256=H1isQc6lQ9cdWBiuW3u-PgQ7FKNWhRMROEpJ8BrFNi4,10398192
-pysentry_rs-0.3.4.dist-info/METADATA,sha256=9ZogMLPmkMOKIEojHs_gVXHCt_0YrZbCVkP3zyNKM6E,25394
-pysentry_rs-0.3.4.dist-info/WHEEL,sha256=BEq5B3wYswoCWPV13YmTFE5pEXWgkinJwNC6mhIE-oI,104
-pysentry_rs-0.3.4.dist-info/entry_points.txt,sha256=3bJguekVEbXTn-ceDCWJaSIZScquPPP1Ux9TPVHHanE,44
-pysentry_rs-0.3.4.dist-info/licenses/LICENSE,sha256=TAMtDCoJuavXz7pCEklrzjH55sdvsy5gKsXY9NsImwY,34878
-pysentry_rs-0.3.4.dist-info/RECORD,,