wpsecscan 2.4.0__tar.gz → 2.5.0__tar.gz

{wpsecscan-2.4.0/wpsecscan.egg-info → wpsecscan-2.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wpsecscan
-Version: 2.4.0
+Version: 2.5.0
 Summary: Defensive WordPress security scanner. 200+ checks, 8-source nightly CVE aggregator, AI-assisted remediation (BYO key), 15 compliance frameworks (OWASP/PCI/NIST/ISO/HIPAA/SOC2/HITRUST/CMMC), Sigstore-signed releases with SLSA L3 provenance, 10 threat-intel feeds (KEV/EPSS/Exploit-DB/ATT&CK/STIX/MISP/OTX/GreyNoise), continuous monitors, consent-gated exploit verification, multi-tenant RBAC/SSO/audit-log enterprise mode, 12 report formats. Authorized testing only.
 Author-email: Bryan <bryaninbangkok@gmail.com>
 License:                     GNU AFFERO GENERAL PUBLIC LICENSE
@@ -705,6 +705,7 @@ Requires-Dist: bcrypt>=4.0; extra == "ops"
 Provides-Extra: ui
 Requires-Dist: Pillow>=10; extra == "ui"
 Requires-Dist: pystray>=0.19; extra == "ui"
+Requires-Dist: keyring>=24; extra == "ui"
 Provides-Extra: all
 Requires-Dist: reportlab>=4.0; extra == "all"
 Requires-Dist: playwright>=1.40; extra == "all"
@@ -713,6 +714,7 @@ Requires-Dist: redis>=5.0; extra == "all"
 Requires-Dist: bcrypt>=4.0; extra == "all"
 Requires-Dist: Pillow>=10; extra == "all"
 Requires-Dist: pystray>=0.19; extra == "all"
+Requires-Dist: keyring>=24; extra == "all"
 Provides-Extra: test
 Requires-Dist: pytest>=7.4; extra == "test"
 Dynamic: license-file
@@ -725,9 +727,10 @@ Dynamic: license-file
 [![release](https://img.shields.io/github/v/release/bryanflowers/wpsecscan)](https://github.com/bryanflowers/wpsecscan/releases/latest)
 [![downloads](https://img.shields.io/github/downloads/bryanflowers/wpsecscan/total)](https://github.com/bryanflowers/wpsecscan/releases)
 [![python](https://img.shields.io/badge/python-3.10%2B-blue)](https://www.python.org/)
-[![checks](https://img.shields.io/badge/checks-200%2B-brightgreen)](FEATURES.md)
+[![checks](https://img.shields.io/badge/checks-226-brightgreen)](FEATURES.md)
 [![CVE sources](https://img.shields.io/badge/CVE%20sources-8-blue)](docs/data-sources.md)
-[![tests passing](https://img.shields.io/badge/tests-664%20passing-brightgreen)](tests/)
+[![tests passing](https://img.shields.io/badge/tests-667%20passing-brightgreen)](tests/)
+[![PyPI](https://img.shields.io/pypi/v/wpsecscan)](https://pypi.org/project/wpsecscan/)
 [![SLSA Level 3](https://img.shields.io/badge/SLSA-Level%203-success)](docs/verify-release.md)
 [![Sigstore signed](https://img.shields.io/badge/Sigstore-signed-blueviolet)](docs/verify-release.md)
 [![threat-intel](https://img.shields.io/badge/threat--intel-10%20providers-orange)](FEATURES.md)
@@ -744,7 +747,7 @@ Dynamic: license-file
 
 **The most thoroughly-sourced WordPress vulnerability scanner — open source, AGPLv3, runs locally.**
 
-187 checks across 18 categories. **8-source nightly CVE aggregator**
+226 checks across 18 categories. **8-source nightly CVE aggregator**
 (NVD + GHSA + Mitre + OSV + Wordfence + WPVulnerability + CIRCL +
 Patchstack). **SLSA L3 + Sigstore-signed releases**. **10-provider
 threat-intel federation** (CISA KEV, EPSS, Exploit-DB, Metasploit,
@@ -802,7 +805,31 @@ Ships as two standalone Windows binaries — no Python required on the machine y
 
 ## Quick install
 
-### Option A — use the pre-built binaries (recommended)
+### Option A — `pip install wpsecscan` (any platform)
+
+The simplest path on Linux, macOS, or Windows-with-Python:
+
+```bash
+pip install wpsecscan
+wpsecscan --version
+wpsecscan https://example.com --json-only
+```
+
+PyPI: <https://pypi.org/project/wpsecscan/>
+
+For the optional GUI minimize-to-tray feature, install with the
+`[ui]` extra (pulls in Pillow + pystray):
+
+```bash
+pip install "wpsecscan[ui]"
+```
+
+Other optional extras: `[pdf]` (reportlab for true PDF exec reports),
+`[browser]` (playwright for headless DOM-XSS), `[yaml]` (pyyaml for
+daemon config), `[ops]` (redis + bcrypt for enterprise mode), or
+`[all]` to install everything.
+
+### Option B — pre-built Windows binaries
 
 1. Open `dist\` in this folder.
 2. Copy `wpsecscan.exe` and `wpsecscan-gui.exe` somewhere on your PATH
@@ -812,7 +839,7 @@ Ships as two standalone Windows binaries — no Python required on the machine y
 The first time you run them, Windows SmartScreen may warn that the publisher is unknown
 (the binaries aren't code-signed). Click **More info → Run anyway**.
 
-### Option B — build from source
+### Option C — build from source
 
 Requires Python 3.10+ and PyInstaller. Open PowerShell in the project root:
 
@@ -830,12 +857,12 @@ dist\wpsecscan-gui.exe       # GUI (~17 MB)
 
 Both are single-file executables — copy them anywhere and they run on their own.
 
-### Option C — run from source directly (development)
+### Option D — run from source directly (development)
 
 ```powershell
 python -m venv .venv
 .\.venv\Scripts\Activate.ps1
-pip install -r requirements.txt
+pip install .
 python run.py https://example.com         # CLI
 python run_gui.py                          # GUI
 pytest                                     # 598 tests
@@ -883,7 +910,7 @@ wpsecscan.exe https://your-wp-site.com --wpscan-token <KEY>
 
 ---
 
-## What it checks (187 checks)
+## What it checks (226 checks)
 
 Passive checks always run; aggressive checks need `--aggressive`.
 
@@ -1166,12 +1193,12 @@ to see errors).
 
 | Category                  | Count |
 |---------------------------|-------|
-| Checks                    | **187** |
+| Checks                    | **226** |
 | Payloads                  | **224** |
 | Exploit signatures        | **307** |
 | Plugin CVE database       | ~7,000 (Wordfence) + 7 other sources via the nightly aggregator |
 | Exploit-playbook entries  | **25** |
-| Tests                     | **598** |
+| Tests                     | **667** |
 
 ---
 

{wpsecscan-2.4.0 → wpsecscan-2.5.0}/README.md

@@ -6,9 +6,10 @@
 [![release](https://img.shields.io/github/v/release/bryanflowers/wpsecscan)](https://github.com/bryanflowers/wpsecscan/releases/latest)
 [![downloads](https://img.shields.io/github/downloads/bryanflowers/wpsecscan/total)](https://github.com/bryanflowers/wpsecscan/releases)
 [![python](https://img.shields.io/badge/python-3.10%2B-blue)](https://www.python.org/)
-[![checks](https://img.shields.io/badge/checks-200%2B-brightgreen)](FEATURES.md)
+[![checks](https://img.shields.io/badge/checks-226-brightgreen)](FEATURES.md)
 [![CVE sources](https://img.shields.io/badge/CVE%20sources-8-blue)](docs/data-sources.md)
-[![tests passing](https://img.shields.io/badge/tests-664%20passing-brightgreen)](tests/)
+[![tests passing](https://img.shields.io/badge/tests-667%20passing-brightgreen)](tests/)
+[![PyPI](https://img.shields.io/pypi/v/wpsecscan)](https://pypi.org/project/wpsecscan/)
 [![SLSA Level 3](https://img.shields.io/badge/SLSA-Level%203-success)](docs/verify-release.md)
 [![Sigstore signed](https://img.shields.io/badge/Sigstore-signed-blueviolet)](docs/verify-release.md)
 [![threat-intel](https://img.shields.io/badge/threat--intel-10%20providers-orange)](FEATURES.md)
@@ -25,7 +26,7 @@
 
 **The most thoroughly-sourced WordPress vulnerability scanner — open source, AGPLv3, runs locally.**
 
-187 checks across 18 categories. **8-source nightly CVE aggregator**
+226 checks across 18 categories. **8-source nightly CVE aggregator**
 (NVD + GHSA + Mitre + OSV + Wordfence + WPVulnerability + CIRCL +
 Patchstack). **SLSA L3 + Sigstore-signed releases**. **10-provider
 threat-intel federation** (CISA KEV, EPSS, Exploit-DB, Metasploit,
@@ -83,7 +84,31 @@ Ships as two standalone Windows binaries — no Python required on the machine y
 
 ## Quick install
 
-### Option A — use the pre-built binaries (recommended)
+### Option A — `pip install wpsecscan` (any platform)
+
+The simplest path on Linux, macOS, or Windows-with-Python:
+
+```bash
+pip install wpsecscan
+wpsecscan --version
+wpsecscan https://example.com --json-only
+```
+
+PyPI: <https://pypi.org/project/wpsecscan/>
+
+For the optional GUI minimize-to-tray feature, install with the
+`[ui]` extra (pulls in Pillow + pystray):
+
+```bash
+pip install "wpsecscan[ui]"
+```
+
+Other optional extras: `[pdf]` (reportlab for true PDF exec reports),
+`[browser]` (playwright for headless DOM-XSS), `[yaml]` (pyyaml for
+daemon config), `[ops]` (redis + bcrypt for enterprise mode), or
+`[all]` to install everything.
+
+### Option B — pre-built Windows binaries
 
 1. Open `dist\` in this folder.
 2. Copy `wpsecscan.exe` and `wpsecscan-gui.exe` somewhere on your PATH
@@ -93,7 +118,7 @@ Ships as two standalone Windows binaries — no Python required on the machine y
 The first time you run them, Windows SmartScreen may warn that the publisher is unknown
 (the binaries aren't code-signed). Click **More info → Run anyway**.
 
-### Option B — build from source
+### Option C — build from source
 
 Requires Python 3.10+ and PyInstaller. Open PowerShell in the project root:
 
@@ -111,12 +136,12 @@ dist\wpsecscan-gui.exe       # GUI (~17 MB)
 
 Both are single-file executables — copy them anywhere and they run on their own.
 
-### Option C — run from source directly (development)
+### Option D — run from source directly (development)
 
 ```powershell
 python -m venv .venv
 .\.venv\Scripts\Activate.ps1
-pip install -r requirements.txt
+pip install .
 python run.py https://example.com         # CLI
 python run_gui.py                          # GUI
 pytest                                     # 598 tests
@@ -164,7 +189,7 @@ wpsecscan.exe https://your-wp-site.com --wpscan-token <KEY>
 
 ---
 
-## What it checks (187 checks)
+## What it checks (226 checks)
 
 Passive checks always run; aggressive checks need `--aggressive`.
 
@@ -447,12 +472,12 @@ to see errors).
 
 | Category                  | Count |
 |---------------------------|-------|
-| Checks                    | **187** |
+| Checks                    | **226** |
 | Payloads                  | **224** |
 | Exploit signatures        | **307** |
 | Plugin CVE database       | ~7,000 (Wordfence) + 7 other sources via the nightly aggregator |
 | Exploit-playbook entries  | **25** |
-| Tests                     | **598** |
+| Tests                     | **667** |
 
 ---
 

{wpsecscan-2.4.0 → wpsecscan-2.5.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "wpsecscan"
-version = "2.4.0"
+version = "2.5.0"
 description = "Defensive WordPress security scanner. 200+ checks, 8-source nightly CVE aggregator, AI-assisted remediation (BYO key), 15 compliance frameworks (OWASP/PCI/NIST/ISO/HIPAA/SOC2/HITRUST/CMMC), Sigstore-signed releases with SLSA L3 provenance, 10 threat-intel feeds (KEV/EPSS/Exploit-DB/ATT&CK/STIX/MISP/OTX/GreyNoise), continuous monitors, consent-gated exploit verification, multi-tenant RBAC/SSO/audit-log enterprise mode, 12 report formats. Authorized testing only."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -48,7 +48,8 @@ yaml = ["pyyaml>=6.0"]
 # Distributed CVE-DB cache + RBAC bcrypt hashing
 ops = ["redis>=5.0", "bcrypt>=4.0"]
 # Optional Pillow for GUI image rendering + pystray for minimize-to-tray (#56)
-ui = ["Pillow>=10", "pystray>=0.19"]
+# + keyring for OS-keychain credential storage (#42)
+ui = ["Pillow>=10", "pystray>=0.19", "keyring>=24"]
 # Everything optional in one install
 all = [
     "reportlab>=4.0",
@@ -58,6 +59,7 @@ all = [
     "bcrypt>=4.0",
     "Pillow>=10",
     "pystray>=0.19",
+    "keyring>=24",
 ]
 # Test deps (also installed by CI)
 test = ["pytest>=7.4"]

wpsecscan-2.5.0/wpsecscan/__init__.py

@@ -0,0 +1 @@
+__version__ = "2.5.0"