skip-trace 0.1.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. skip_trace/__about__.py +19 -0
  2. skip_trace/__init__.py +6 -0
  3. skip_trace/__main__.py +9 -0
  4. skip_trace/analysis/__init__.py +4 -0
  5. skip_trace/analysis/evidence.py +312 -0
  6. skip_trace/analysis/ner.py +58 -0
  7. skip_trace/analysis/scoring.py +282 -0
  8. skip_trace/analysis/source_scanner.py +411 -0
  9. skip_trace/cli.py +177 -0
  10. skip_trace/collectors/__init__.py +4 -0
  11. skip_trace/collectors/github.py +241 -0
  12. skip_trace/collectors/package_files.py +150 -0
  13. skip_trace/collectors/pypi.py +158 -0
  14. skip_trace/collectors/whois.py +202 -0
  15. skip_trace/config.py +165 -0
  16. skip_trace/exceptions.py +22 -0
  17. skip_trace/main.py +269 -0
  18. skip_trace/py.typed.py +0 -0
  19. skip_trace/reporting/__init__.py +0 -0
  20. skip_trace/reporting/json_reporter.py +22 -0
  21. skip_trace/reporting/md_reporter.py +115 -0
  22. skip_trace/schemas.py +131 -0
  23. skip_trace/utils/__init__.py +4 -0
  24. skip_trace/utils/cache.py +77 -0
  25. skip_trace/utils/cli_suggestions.py +91 -0
  26. skip_trace/utils/http_client.py +45 -0
  27. skip_trace/utils/safe_targz.py +161 -0
  28. skip_trace/utils/validation.py +52 -0
  29. skip_trace-0.1.0.dist-info/METADATA +125 -0
  30. skip_trace-0.1.0.dist-info/RECORD +33 -0
  31. skip_trace-0.1.0.dist-info/WHEEL +4 -0
  32. skip_trace-0.1.0.dist-info/entry_points.txt +2 -0
  33. skip_trace-0.1.0.dist-info/licenses/LICENSE +21 -0
skip_trace-0.1.0.dist-info/METADATA ADDED
@@ -0,0 +1,125 @@
1
+ Metadata-Version: 2.4
2
+ Name: skip-trace
3
+ Version: 0.1.0
4
+ Summary: Ownership Attribution for Python Packages
5
+ Project-URL: Homepage, https://github.com/matthewdeanmartin/skip-trace
6
+ Project-URL: Issues, https://github.com/matthewdeanmartin/skip-trace/issues
7
+ Author-email: Matthew Dean Martin <matthewdeanmartin@gmail.com>
8
+ License-File: LICENSE
9
+ Classifier: Development Status :: 1 - Planning
10
+ Classifier: Operating System :: OS Independent
11
+ Classifier: Programming Language :: Python :: 3
12
+ Classifier: Programming Language :: Python :: 3.9
13
+ Classifier: Programming Language :: Python :: 3.10
14
+ Classifier: Programming Language :: Python :: 3.11
15
+ Classifier: Programming Language :: Python :: 3.12
16
+ Classifier: Programming Language :: Python :: 3.13
17
+ Classifier: Topic :: Security
18
+ Classifier: Topic :: Software Development :: Quality Assurance
19
+ Requires-Python: >=3.8
20
+ Requires-Dist: beautifulsoup4>=4.12.0
21
+ Requires-Dist: email-validator>=2.0.0
22
+ Requires-Dist: en-core-web-sm
23
+ Requires-Dist: httpx[http2]>=0.25.0
24
+ Requires-Dist: openai>=1.3.0
25
+ Requires-Dist: pip>=20
26
+ Requires-Dist: pygithub>=1.59.0
27
+ Requires-Dist: python-dotenv
28
+ Requires-Dist: python-dotenv>=1.0.0
29
+ Requires-Dist: python-whois>=0.8.0
30
+ Requires-Dist: rich-argparse
31
+ Requires-Dist: rich>=13.0.0
32
+ Requires-Dist: sigstore>=1.0.0
33
+ Requires-Dist: spacy>=3.0.0
34
+ Requires-Dist: tldextract
35
+ Requires-Dist: tldextract>=5.0.0
36
+ Requires-Dist: tomli; python_version < '3.11'
37
+ Requires-Dist: whoisit>=1.2
38
+ Description-Content-Type: text/markdown
39
+
40
+ # skip_trace
41
+
42
+ Who owns your dependencies
43
+
44
+ - Can they be linked to a real person or company in the real world
45
+ - Can they be contacted
46
+
47
+ Of course all packages have a pypi user. The list of users isn't academic, you care about them because you want to
48
+ communicate with them.
49
+
50
+ [![tests](https://github.com/matthewdeanmartin/skip_trace/actions/workflows/build.yml/badge.svg)
51
+ ](https://github.com/matthewdeanmartin/skip_trace/actions/workflows/tests.yml)
52
+ [![pre-commit.ci status](https://results.pre-commit.ci/badge/github/matthewdeanmartin/skip_trace/main.svg)
53
+ ](https://results.pre-commit.ci/latest/github/matthewdeanmartin/skip_trace/main)
54
+ [![Downloads](https://img.shields.io/pypi/dm/skip-trace)](https://pypistats.org/packages/skip-trace)
55
+ [![Python Version](https://img.shields.io/pypi/pyversions/skip-trace)
56
+ ![Release](https://img.shields.io/pypi/v/skip-trace)
57
+ ](https://pypi.org/project/skip-trace/)
58
+
59
+
60
+ ## Installation
61
+
62
+ **Requires**
63
+
64
+ - Github key
65
+ - Initializing `spacy`
66
+ - `git clone`, `uv sync`
67
+ - OR `python -m spacy download en_core_web_sm`
68
+ - OR `python -c 'import spacy.cli; spacy.cli.download("en_core_web_sm")'`
69
+ - (Not implemented yet) Openrouter/OpenAI key
70
+
71
+ ## Usage
72
+
73
+ ```bash
74
+ skip-trace who-owns requests
75
+ ```
76
+
77
+ What you will see is the owner table and the maintainer tables.
78
+
79
+ The owner table is pretty close to all the names, email addresses and custom domains I can find.
80
+
81
+
82
+ ## Use Cases
83
+
84
+ - You are worried about supply chain attacks and are concerned that a package is actually maintained by North Korean
85
+ government backed hackers
86
+ - You need to file a bug report and there isn't an issue link
87
+ - You want to hire, buy something from the maintainer, or charitably donate money
88
+ - You want to do a [PEP 541 take over](https://peps.python.org/pep-0541/)
89
+ - You want to volunteer to take over an abandoned package instead of forking it
90
+ - You want to find out if your project is now unreachable. If you are conscientious enough to run this on your own
91
+ packages, you probably are not the person to rigorously avoid adding contact information.
92
+ - You are trying to publish anonymously and want to check to see if the package is actually anonymous
93
+
94
+ ## Unreachable
95
+
96
+ See [PEP 541](https://peps.python.org/pep-0541/) for exact text
97
+
98
+ - Do you have a real email address in your metadata
99
+ - Do you have a link to a page with your real email address or other means to reach you
100
+
101
+ ## Name Squatting
102
+
103
+ If a package has take a good name but the user has published nothing to it, that is Name Squatting
104
+
105
+ ## Prior Art
106
+
107
+ Nothing I could find.
108
+
109
+
110
+
111
+ ## Project Health & Info
112
+
113
+ | Metric | Health | Metric | Info |
114
+ |:------------------|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:----------------|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
115
+ | Tests | [![Tests](https://github.com/matthewdeanmartin/skip_trace/actions/workflows/build.yml/badge.svg)](https://github.com/matthewdeanmartin/skip_trace/actions/workflows/build.yml) | License | [![License](https://img.shields.io/github/license/matthewdeanmartin/skip_trace)](https://github.com/matthewdeanmartin/skip_trace/blob/main/LICENSE.md) |
116
+ | Coverage | [![Codecov](https://codecov.io/gh/matthewdeanmartin/skip_trace/branch/main/graph/badge.svg)](https://codecov.io/gh/matthewdeanmartin/skip_trace) | PyPI | [![PyPI](https://img.shields.io/pypi/v/skip-trace)](https://pypi.org/project/skip-trace/) |
117
+ | Lint / Pre-commit | [![pre-commit.ci status](https://results.pre-commit.ci/badge/github/matthewdeanmartin/skip_trace/main.svg)](https://results.pre-commit.ci/latest/github/matthewdeanmartin/skip_trace/main) | Python Versions | [![Python Version](https://img.shields.io/pypi/pyversions/skip_trace)](https://pypi.org/project/skip_trace/) |
118
+ | Quality Gate | [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=matthewdeanmartin_skip_trace\&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=matthewdeanmartin_skip_trace) | Docs | [![Docs](https://readthedocs.org/projects/skip_trace/badge/?version=latest)](https://skip_trace.readthedocs.io/en/latest/) |
119
+ | CI Build | [![Build](https://github.com/matthewdeanmartin/skip_trace/actions/workflows/build.yml/badge.svg)](https://github.com/matthewdeanmartin/skip_trace/actions/workflows/build.yml) | Downloads | [![Downloads](https://static.pepy.tech/personalized-badge/skip_trace?period=total\&units=international_system\&left_color=grey\&right_color=blue\&left_text=Downloads)](https://pepy.tech/project/skip_trace) |
120
+ | Maintainability | [![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=matthewdeanmartin_skip_trace\&metric=sqale_rating)](https://sonarcloud.io/summary/new_code?id=matthewdeanmartin_skip_trace) | Last Commit | ![Last Commit](https://img.shields.io/github/last-commit/matthewdeanmartin/skip_trace) |
121
+
122
+ | Category | Health
123
+ |-------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------|
124
+ | **Open Issues** | ![GitHub issues](https://img.shields.io/github/issues/matthewdeanmartin/skip_trace) |
125
+ | **Stars** | ![GitHub Repo stars](https://img.shields.io/github/stars/matthewdeanmartin/skip_trace?style=social) |
skip_trace-0.1.0.dist-info/RECORD ADDED
@@ -0,0 +1,33 @@
1
+ skip_trace/__about__.py,sha256=aouD5xOQKs7wYRs0yiZysx-VWoCOqWX915NaDSofMR4,468
2
+ skip_trace/__init__.py,sha256=UkTfkLRuPO5XBc9_6IYHDXqGB_t8AfCZSzAdMS8AuyE,129
3
+ skip_trace/__main__.py,sha256=auCXP2BqRl6sPSrYr-_c5jA8fFKcOKTBTL2J9gMeFl0,144
4
+ skip_trace/cli.py,sha256=ylcR_PMRcaCDf2pmrEGbna-q_3DJVlbB0ard1R86yaM,5483
5
+ skip_trace/config.py,sha256=BHM8TuJ_jWDhr1uz9hAAwA3eJwu_m-pYmAvnx_TcCcw,4735
6
+ skip_trace/exceptions.py,sha256=MnMlTjPYrvtB_1j-CAHwmlggjfNCDiRiThjXyuX70Js,581
7
+ skip_trace/main.py,sha256=zcO1KaHB3nWq5oq4vOTraxuSSID9Ey78qYCjPbB0b9E,9907
8
+ skip_trace/py.typed.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
9
+ skip_trace/schemas.py,sha256=otxLkn56HtVGlycgOlzI6cTv_Iu_0ICfYYClb2WtPD0,3103
10
+ skip_trace/analysis/__init__.py,sha256=7bOZj8CbG7Ezl9w_Z9gZCuO456psxecJCmPLxljFiuo,135
11
+ skip_trace/analysis/evidence.py,sha256=z8-4AcoxTRTMzr4NhilijfVifjWmybTlBsvGR47evHc,11661
12
+ skip_trace/analysis/ner.py,sha256=Ckcbyeza7fkDV-oGWTfakowLeWcybTzUpWjJ5bMlIwA,1607
13
+ skip_trace/analysis/scoring.py,sha256=K_pyUVwkGUasYOdveNtvrBrTjZ03VbovjMbM0mbA7_s,10328
14
+ skip_trace/analysis/source_scanner.py,sha256=nBE--gCaWfrXxsc-OdU9uhi4deYuF6AodW4w9b64sB8,15277
15
+ skip_trace/collectors/__init__.py,sha256=7wRLLntBWFs-lik7Rr-oPv426zweFyCSKbwit1gXUdU,141
16
+ skip_trace/collectors/github.py,sha256=CIwapS1UO6qLnoVyTHe7vLi159d6qRqCk9YRRk7jb7g,8575
17
+ skip_trace/collectors/package_files.py,sha256=WT1I-WN6MclGGb02SaAE3kUTM5TImDdb9qXvVB_uIPc,6026
18
+ skip_trace/collectors/pypi.py,sha256=OeqKIsg-s7oKxqTfcquqYVjyecmjNSupXVFcqBmKMFU,6205
19
+ skip_trace/collectors/whois.py,sha256=tQYI30IbRMlHEwn3FRSdKYX_c2TJLyMUyhLdIxpXU4o,6953
20
+ skip_trace/reporting/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
21
+ skip_trace/reporting/json_reporter.py,sha256=VInt34k3Zo41y7SKkOnjxRj_gsB932GaAZsBj93Fvfc,610
22
+ skip_trace/reporting/md_reporter.py,sha256=V0tR6srTVe4_PVB2J0TrC3B_tB_ZuDTAZ2xLrpMMaRo,4081
23
+ skip_trace/utils/__init__.py,sha256=Wm-u-aQCpDEGL5wiRHWQ1ZwNQvA2iSLRpDNeb46_2P8,126
24
+ skip_trace/utils/cache.py,sha256=K6k0MXuf3fDr1ecjThV3qhZFHYhgCi0K69i27SoJmAY,2415
25
+ skip_trace/utils/cli_suggestions.py,sha256=pDNqfLhcYWEqvFM4jiOsUGXlqvTZxpWHR_O1hoCvzyM,2886
26
+ skip_trace/utils/http_client.py,sha256=3n0c4QBMCXHnIZ6Jn30HZWtFaWYvrq0SNr5Mp2ll_1E,1350
27
+ skip_trace/utils/safe_targz.py,sha256=ETOJc5VA9A5KDhlaV9N15tLbTFABA0zSQob9eXnKQPc,5233
28
+ skip_trace/utils/validation.py,sha256=cgPcmkVEoHZ9vkvntycckxpQM5UbrVpUvUCb0S2FZrs,1427
29
+ skip_trace-0.1.0.dist-info/METADATA,sha256=hij-sg6Pgci3LycgEJpLTZI17RULvlzr22E5cbB53uY,8380
30
+ skip_trace-0.1.0.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
31
+ skip_trace-0.1.0.dist-info/entry_points.txt,sha256=zR7je0FG4CxaLIfaONVMi9LgmKfWtbYkrTVLclrTwhg,51
32
+ skip_trace-0.1.0.dist-info/licenses/LICENSE,sha256=CDE_-1UnY5KRaDCIuCdNg7j7lkGCJbtZWTbhB10QeLk,1071
33
+ skip_trace-0.1.0.dist-info/RECORD,,
skip_trace-0.1.0.dist-info/WHEEL ADDED
@@ -0,0 +1,4 @@
1
+ Wheel-Version: 1.0
2
+ Generator: hatchling 1.27.0
3
+ Root-Is-Purelib: true
4
+ Tag: py3-none-any
skip_trace-0.1.0.dist-info/entry_points.txt ADDED
@@ -0,0 +1,2 @@
1
+ [console_scripts]
2
+ skip-trace = skip_trace.cli:main
skip_trace-0.1.0.dist-info/licenses/LICENSE ADDED
@@ -0,0 +1,21 @@
1
+ MIT License
2
+
3
+ Copyright (c) 2025 Matthew Martin
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
+ SOFTWARE.