Pkgcheck

Latest version: v0.10.29

Safety actively analyzes 629004 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 10 of 13

0.6.6

---------------------------

- HttpsUrlAvailable: Check http URLs for https availability (not run by
default).

- MissingLicenseRestricts: Skip RESTRICT="mirror" for packages lacking SRC_URI.

- DeprecatedEapiCommand: Check for deprecated EAPI commands (e.g. dohtml usage in EAPI 6).

- BannedEapiCommand: Check for banned EAPI commands (e.g. dohtml usage in EAPI 7).

- StableRequestCheck: Use ebuild modification events instead of added events to
check for stabilization.

- Add support for filtering versioned results to only check the latest VCS and
non-VCS packages per slot.

- MissingSlotDep: Fix dep slot determination by using use flag stripped dep
atoms instead of unversioned atoms.

- Add HomepageUrlCheck and FetchablesUrlCheck network-based checks that check
HOMEPAGE and SRC_URI urls for various issues and require network access so
they aren't run by default. The ``--net`` option must be specified in order
to run them.

---------------------------

0.6.5

---------------------------

- InvalidUseFlags: Flag invalid USE flags in IUSE.

- UnknownUseFlags: Use specific keyword result for unknown USE flags in IUSE
instead of MetadataError.

- pkgcheck scan: Add ``info`` alias for -k/--keywords option and rename
errors/warnings aliases to ``error`` and ``warning``.

- Add Info result type and mark a several non-warning results as info level
(e.g. RedundantVersion and PotentialStable).

- MissingLicenseRestricts: Flag restrictive license usage missing required
RESTRICT settings.

- MissingSlotDepCheck: Properly report missing slotdeps for atom with use deps.

- pkgcheck scan: Add ``all`` alias for -c/--checks option.

- MissingSignOff: Add initial check for missing commit message sign offs.

- InvalidLicenseHeader: Add initial license header check for the gentoo repo.

- BadCommitSummary: Add initial commit message summary formatting check.

---------------------------

0.6.4

---------------------------

- Add FormatReporter supporting custom format string output.

- pkgcheck scan: Drop --metadata-xsd-required option since the related file is
now bundled with pkgcore.

- Add CsvReporter for outputting results in CSV format.

- pkgcheck scan: Add --commits option that use local git repo changes to
determine scan targets.

- DroppedUnstableKeywords: Disregard when stable target keywords exist.

- LocalUSECheck: Add test for USE flags with reserved underscore character.

- PathVariablesCheck: Drop 'into' from prefixed dir functions list to avoid
false positives in comments.

- MissingUnpackerDepCheck: Drop checks for jar files since most are being
directly installed and not unpacked.

- Make gentoo repo checks work for external gentoo repos on systems with a
configured gentoo system repo.

- UnknownFile: Flag unknown files in package directories for the gentoo repo.

---------------------------

0.6.3

---------------------------

- PathVariablesCheck: Flag double path prefix usage on uncommented lines only
to avoid some types of false positives.

- BadInsIntoCheck: flag ``insinto /usr/share/doc/${PF}`` usage for recent EAPIs
as it should be replaced by docinto and dodoc [-r] calls.

- BadInsIntoCheck: Drop old cron support.

- Skip global checks when running at cat/pkg/version restriction levels for
``pkgcheck scan``. Also, skip package level checks that require package set
context when running at a single version restriction level.

---------------------------

0.6.2

---------------------------

- TreeVulnerabilitiesCheck: Restrict to checking against the gentoo repo only.

- Allow explicitly selected keywords to properly enable their related checks if
they must be explicitly enabled.

- UnusedMirrorsCheck: Ignore missing checksums for fetchables that will be
caught by other checks.

- pkgcheck replay: Add support for replaying JsonStream reporter files.

- Add initial JsonStream reporter as an alternative to the pickle reporters for
serializing and deserializing result objects.

- Add support for comparing and hashing result objects.

- Fix triggering metadata.xml maintainer checks only for packages.

---------------------------

0.6.1

---------------------------

- NonexistentProfilePath: Change from warning to an error.

- Fix various XML result initialization due to missing attributes.

- MissingUnpackerDepCheck: Fix matching against versioned unpacker deps.

- Rename BadProto keyword to BadProtocol.

---------------------------

Page 10 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.