Setuptools

Latest version: v69.5.1

Safety actively analyzes 630169 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 88 of 109

2.0

Not secure
===

* Issue 121: Exempt lib2to3 pickled grammars from DirectorySandbox.
* Issue 41: Dropped support for Python 2.4 and Python 2.5. Clients requiring
setuptools for those versions of Python should use setuptools 1.x.
* Removed ``setuptools.command.easy_install.HAS_USER_SITE``. Clients
expecting this boolean variable should use ``site.ENABLE_USER_SITE``
instead.
* Removed ``pkg_resources.ImpWrapper``. Clients that expected this class
should use ``pkgutil.ImpImporter`` instead.

1.4.2

Not secure
=====

* Issue 116: Correct TypeError when reading a local package index on Python
3.

1.4.1

Not secure
=====

* Issue 114: Use ``sys.getfilesystemencoding`` for decoding config in
``bdist_wininst`` distributions.

* Issue 105 and Issue 113: Establish a more robust technique for
determining the terminal encoding::

1. Try ``getpreferredencoding``
2. If that returns US_ASCII or None, try the encoding from
``getdefaultlocale``. If that encoding was a "fallback" because Python
could not figure it out from the environment or OS, encoding remains
unresolved.
3. If the encoding is resolved, then make sure Python actually implements
the encoding.
4. On the event of an error or unknown codec, revert to fallbacks
(UTF-8 on Darwin, ASCII on everything else).
5. On the encoding is 'mac-roman' on Darwin, use UTF-8 as 'mac-roman' was
a bug on older Python releases.

On a side note, it would seem that the encoding only matters for when SVN
does not yet support ``--xml`` and when getting repository and svn version
numbers. The ``--xml`` technique should yield UTF-8 according to some
messages on the SVN mailing lists. So if the version numbers are always
7-bit ASCII clean, it may be best to only support the file parsing methods
for legacy SVN releases and support for SVN without the subprocess command
would simple go away as support for the older SVNs does.

1.4

Not secure
===

* Issue 27: ``easy_install`` will now use credentials from .pypirc if
present for connecting to the package index.
* BB Pull Request 21: Omit unwanted newlines in ``package_index._encode_auth``
when the username/password pair length indicates wrapping.

1.3.2

Not secure
=====

* Issue 99: Fix filename encoding issues in SVN support.

1.3.1

Not secure
=====

* Remove exuberant warning in SVN support when SVN is not used.

Page 88 of 109

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.