Setuptools

Latest version: v69.5.1

Safety actively analyzes 630130 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 81 of 109

6.0.2

Not secure
=====

* Issue 262: Fixed regression in pip install due to egg-info directories
being omitted. Re-opens Issue 118.

6.0.1

Not secure
=====

* Issue 259: Fixed regression with namespace package handling on ``single
version, externally managed`` installs.

6.0

===

* Issue 100: When building a distribution, Setuptools will no longer match
default files using platform-dependent case sensitivity, but rather will
only match the files if their case matches exactly. As a result, on Windows
and other case-insensitive file systems, files with names such as
'readme.txt' or 'README.TXT' will be omitted from the distribution and a
warning will be issued indicating that 'README.txt' was not found. Other
filenames affected are:

- README.rst
- README
- setup.cfg
- setup.py (or the script name)
- test/test*.py

Any users producing distributions with filenames that match those above
case-insensitively, but not case-sensitively, should rename those files in
their repository for better portability.
* BB Pull Request 72: When using ``single_version_externally_managed``, the
exclusion list now includes Python 3.2 ``__pycache__`` entries.
* BB Pull Request 76 and BB Pull Request 78: lines in top_level.txt are now
ordered deterministically.
* Issue 118: The egg-info directory is now no longer included in the list
of outputs.
* Issue 258: Setuptools now patches distutils msvc9compiler to
recognize the specially-packaged compiler package for easy extension module
support on Python 2.6, 2.7, and 3.2.

5.8

Not secure
===

* Issue 237: ``pkg_resources`` now uses explicit detection of Python 2 vs.
Python 3, supporting environments where builtins have been patched to make
Python 3 look more like Python 2.

5.7

Not secure
===

* Issue 240: Based on real-world performance measures against 5.4, zip
manifests are now cached in all circumstances. The
``PKG_RESOURCES_CACHE_ZIP_MANIFESTS`` environment variable is no longer
relevant. The observed "memory increase" referenced in the 5.4 release
notes and detailed in Issue 154 was likely not an increase over the status
quo, but rather only an increase over not storing the zip info at all.

5.6

Not secure
===

* Issue 242: Use absolute imports in svn_utils to avoid issues if the
installing package adds an xml module to the path.

Page 81 of 109

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.