Pkgcheck

Latest version: v0.10.29

Safety actively analyzes 628989 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 9 of 13

0.7.2

---------------------------

- pkgcheck scan: Change --filtered option to -f/--filter which supports both
'repo' and 'latest' arguments to filter scanned packages (184).

- Fix ``pkgcheck scan --commits`` usage with overlays (188).

- MissingUseDepDefault: Check unconditional use deps for missing defaults,
previously only conditional flags were being checked.

- DuplicateEclassInherits: Add initial result for flagging duplicate eclass
inherits.

- BadWhitespaceCharacter: Add initial result for flagging unicode whitespace in
ebuilds that bash doesn't treat as regular whitespace.

- ProfilesCheck: Add support for validating package.deprecated entries.

- Use .git/info/exclude from repos in addition to .gitignore to ignore files
for relevant checks.

---------------------------

0.7.1

---------------------------

- DeprecatedPkg: Add initial result for flagging package dependencies
deprecated via package.deprecated.

- DeprecatedEclassCheck: Add support for conditionally deprecating eclasses
with epatch and versionator being the first eclasses to be flagged for
conditional deprecation.

- SourcingCheck: Add separate check to validate ebuild sourcing and flag
invalid SLOTs via a new InvalidSlot result.

- pkgcheck scan: Add --sorted option to forcibly perform a global sort -- only
useful for limited cases such as generating expected test output.

- pkgcheck cache: Add support for listing and removing cache types for
non-registered repos.

- pkgcheck scan: Replace --git-disable/--profile-cache options with --cache. By
default all caches are enabled. To disable all of them, use something similar
to '--cache false'.

Cache types can also be enabled or disabled individually using a
comma-separated cache type list, e.g. '--cache profiles' will only enable
profiles caches and '--cache=-git' will only disable git caches leaving
all other caches enabled.

- Prioritize checks that scan for metadata errors so they get run before checks
that use the related metadata attrs.

- Fix memory leak when generating caches for certain git repos (178).

- pkgcheck scan: Drop --profiles-base option.

- Avoid caching a repo's base package.mask for profile filters in order to
avoid more cases of profile cache invalidation.

- Split InvalidDependency into individual attr results, e.g. InvalidRdepend.

- Split RestrictsCheck into separate checks for RESTRICT and PROPERTIES.

- AbsoluteSymlinkCheck: Report dosym usage with path variables, e.g. ${ED}.

- BadHomepage: Flag packages using a generic Gentoo HOMEPAGE (177).

- Add initial support for using a repo's .gitignore file to avoid reporting
matching files for certain results (140).

---------------------------

0.7.0

---------------------------

- BadInsIntoCheck: Skip reporting insinto calls using subdirs since the related
commands don't support installing files into subdirs.

- PerlCheck: Run by default if perl and deps are installed otherwise skip unless
explicitly enabled.

- SourcingError: Add specific result for ebuilds that fail sourcing due to
metadata issues.

- Fix git --commits option restriction.

---------------------------

0.6.9

---------------------------

- MissingSlash: Avoid some types of false positives where the path variable is
used to create a simple string, but not as a path directly.

- BadPerlModuleVersion: Add support for verifying Gentoo's perl module
versioning scheme -- not run by default since it requires various perl
dependencies.

- BadCommitSummary: Also allow "${CATEGORY}/${P}:" prefixes.

- MetadataError: Fix suppressing duplicate results due to multiprocess usage.

- VisibleVcsPkg: Collapse profile reports for non-verbose mode.

- Use replacement character for non-UTF8 characters while decoding author,
committer, and message fields from git logs.

- pkgcheck scan: Try parsing target arguments as restrictions before falling
back to using path restrictions.

- EmptyProject: Check for projects with no members in projects.xml.

- StaticSrcUri: Check if SRC_URI uses static values for P or PV instead of the
dynamic, variable equivalents.

- MatchingChksums: Check for distfiles that share the same checksums but have
different names.

- pkgcheck scan: Parallelize checks for targets passed in via cli args.

- Sort versioned package results under package scanning scope so outputted
results are deterministic when scanning against single packages similar to
what the output is per package when running scans at a category or repo
level.

---------------------------

0.6.8

---------------------------

- pkgcheck scan: Add -t/--tasks option to limit the number of async tasks that
can run concurrently. Currently used to limit the number of concurrent
network requests made.

- Repository level checks are now run in parallel by default.

- Fix iterating over git commits to fix git-related checks.

---------------------------

0.6.7

---------------------------

- pkgcheck scan: All scanning scopes now run checks in parallel by default for
multi-core systems. For repo/category scope levels parallelism is done per
package while for package/version scope levels parallelism is done per
version. The -j/--jobs option was also added to allow controlling the amount
of processes used when scanning, by default it's set to the number of CPUs
the target system has.

- pkgcheck cache: Add initial cache subcommand to support updating/removing
caches used by pkgcheck. This allows users to forcibly update/remove caches
when they want instead of pkgcheck only handling the process internally
during the scanning process.

- Add specific result keywords for metadata issues relating to various package
attributes instead of using the generic MetadataError for all of them.

- Drop check for PortageInternals as the last usage was dropped from the tree.

- Add EmptyCategoryDir and EmptyPackageDir results to warn when the gentoo repo
has empty category or package directories that people removing packages
forgot to handle.

- Drop HttpsAvailableCheck and its related HttpsAvailable result. The network
checks should now support dynamically pinging sites to test for viability.

- Port network checks to use the requests module for http/https requests so
urllib is only used for ftp URLs.

---------------------------

Page 9 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.