Pkgcheck

Latest version: v0.10.29

Safety actively analyzes 628969 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 13

0.10.23

----------------------------

- scan: use ``NO_COLOR`` environment variable to disable colors instead of
``NOCOLOR`` (Ulrich Müller, https://bugs.gentoo.org/898230)

**New checks:**

- network: add ``kde-invent`` remote-id (Sam James, 551)

- EbuildSemiReservedName: check for usage of semi-reserved names in ebuilds
(Arthur Zamarin, 552)

- PythonPEP517WithoutRevbump: check for DISTUTILS_USE_PEP517 addition or
removal without revision bump (Sam James, 556)

- EAPIChangeWithoutRevbump: check for EAPI change without revision bump (Arthur
Zamarin, 558)

**Fixed bugs:**

- StableRequestCheck: ignore versions which aren't keyworded for stable arches
(Arthur Zamarin, 544)

- PythonMissingSCMDependency: update to new canonical package names of SCM
python packages (Arthur Zamarin)

----------------------------

0.10.22

----------------------------

**New checks:**

- PythonInlinePyPIURI: new check for using inline PyPI URI instead of via new
``pypi.eclass`` (Michał Górny, 543)

**Fixed bugs:**

- SuspiciousSrcUriChange: fix false positives for ``SRC_URI`` mirror expanded
(Arthur Zamarin, 542)

- SuspiciousSrcUriChange: fix false positives on user configuration with
default mirror (Arthur Zamarin, 548, 549)

- InvalidCommitTag: fix false positives with advanced formatted ``Fixes`` and
``Reverts`` tags (Arthur Zamarin, 546)

- UnusedInherits: fix false positives for eclasses defining special global
variables such as ``SRC_URI`` and ``HOMEPAGE`` (Arthur Zamarin, 361, 540)

----------------------------

0.10.21

----------------------------

**New checks:**

- ProvidedEclassInherit: new check for inheriting provided eclases (Arthur
Zamarin, 509)

- MissingInherits: don't show for functions defined in ebuild (Arthur Zamarin,
513)

- EclassUsageCheck: check for setting user variables in ebuilds (Arthur
Zamarin, 518)

- VariableScopeCheck: Disallow ``D`` and ``ED`` in ``pkg_postinst`` (Ulrich
Müller, 523)

- ProfilesCheck: check for unknown ``ARCH`` in make.defaults (Arthur Zamarin,
525)

- ProfilesCheck: check for unknown ``USE`` & ``IUSE_IMPLICIT`` in make.defaults
(Arthur Zamarin, 525)

- ProfilesCheck: check for unknown ``USE_EXPAND_*`` in make.defaults (Arthur
Zamarin, 525)

- ProfilesCheck: check ``USE_EXPAND_VALUES_*`` in make.defaults (Arthur
Zamarin, 525)

- ProfilesCheck: check missing values for implicit in make.defaults (Arthur
Zamarin, 525)

- ArchesMisSync: check for missync between ``arch.list`` and ``arches.desc``
(Arthur Zamarin, 529)

- SrcUriChecksumChange: check for changing checksums of distfiles without
distfile rename (Arthur Zamarin, 497)

- SuspiciousSrcUriChange: check for changing URLs of distfiles without distfile
rename (Arthur Zamarin, 497)

- InvalidMetadataRestrict: check for invalid restricts in metadata.xml (Arthur
Zamarin, 532)

- PythonPackageNameCheck: check for mismatching python package names (Michał
Górny, Arthur Zamarin, 534)

- PythonCheck: check for missing BDEPEND on setuptools_scm or alike (Arthur
Zamarin, 534)

**Fixed bugs:**

- git checks: include revision for old name during ``git mv`` (Arthur Zamarin,
511)

- Profile caching: use REPO profile base to improve cache hits (Daniel M.
Weeks, 528)

- MissingManifest: fix behavior under thick repos (Arthur Zamarin, 530)

- scan: suppress non-error results in quiet mode (Arthur Zamarin, 413)

- RdependChange: skip when revbumped in same batch (Arthur Zamarin, 459)

- scan: fix no attribute live or slot for commits scanning (Arthur Zamarin,
380)

- setup.py: fix usage of absolute path, which fixes compatibility with new
setuptools (Arthur Zamarin, https://bugs.gentoo.org/892938)

----------------------------

0.10.20

----------------------------

- MissingRemoteIdCheck: give ready ``<remote-id/>`` sample (Michał Górny, 500)

- Format code with ``black`` (Arthur Zamarin)

----------------------------

0.10.19

----------------------------

- scan: add support to disable colors using environment variable ``NOCOLOR``
(Arthur Zamarin)

- Use refactored and pure setuptools as build backend for pkgcheck. This
includes removal of old development scripts and setup.py hacks, in favor of
a simple commands or using the Makefile. (Arthur Zamarin, 494)

- docs: use new snakeoil extension for sphinx (Arthur Zamarin, 494)

- release: add support for other linux architectures wheels, including
aarch64, ppc64le, and s390x (Arthur Zamarin, 494)

- PythonCheck: remove obsolete pypy packages (Michał Górny, 495)

- PythonCheck: stop warning about eclass use on ``python:2.7`` deps (Michał
Górny, 495)

----------------------------

0.10.18

----------------------------

Special thanks is given to Sam James, for continues support during all
development, bringing ideas, testing and improving, and especially proofreading
and improving all docs, texts and help messages. Every release is better thanks
to him.

- Network checks: fix wrong attributes ("blame") shown when same URL is checked
(403, Arthur Zamarin)

- BetterCompressionCheck: new check for suggesting better compression URI for
gitlab and github distfiles (483, Arthur Zamarin)

- ExcessiveLineLength: report lines longer than 120 characters (with multiple
exception rules) (480, Arthur Zamarin)

- MissingRemoteIdCheck: new check for suggesting missing remote-ids, inferred
from HOMEPAGE and SRC_URI (486, Arthur Zamarin)

- DoCompressedFilesCheck: new check for calling ``doman``, ``newman``, and
``doinfo`` with compressed files (485, Arthur Zamarin)

- AcctCheck: determine dynamic ID range from repository file
``metadata/qa-policy.conf`` rather than static hardcoded values in pkgcheck
(489, Arthur Zamarin)

- UnquotedVariable: fix false positives with ``declaration_command`` and
``unset_command`` (Arthur Zamarin)

- VirtualWithSingleProvider: new check for virtual packages with a single
provider across all versions, which should be deprecated (484, Arthur
Zamarin)

- VirtualProvidersCheck: new check for virtual packages defining build
dependencies (484, Arthur Zamarin)

- NonPosixHeadTailUsage: new check for non-POSIX compliant usage of ``head``
and ``tail`` (491, Arthur Zamarin)

- drop Python 3.8 support (Arthur Zamarin)

----------------------------

Page 2 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.