Pkgcheck

Latest version: v0.10.31

Safety actively analyzes 681844 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 10 of 13

0.6.8

---------------------------

- pkgcheck scan: Add -t/--tasks option to limit the number of async tasks that
can run concurrently. Currently used to limit the number of concurrent
network requests made.

- Repository level checks are now run in parallel by default.

- Fix iterating over git commits to fix git-related checks.

---------------------------

0.6.7

---------------------------

- pkgcheck scan: All scanning scopes now run checks in parallel by default for
multi-core systems. For repo/category scope levels parallelism is done per
package while for package/version scope levels parallelism is done per
version. The -j/--jobs option was also added to allow controlling the amount
of processes used when scanning, by default it's set to the number of CPUs
the target system has.

- pkgcheck cache: Add initial cache subcommand to support updating/removing
caches used by pkgcheck. This allows users to forcibly update/remove caches
when they want instead of pkgcheck only handling the process internally
during the scanning process.

- Add specific result keywords for metadata issues relating to various package
attributes instead of using the generic MetadataError for all of them.

- Drop check for PortageInternals as the last usage was dropped from the tree.

- Add EmptyCategoryDir and EmptyPackageDir results to warn when the gentoo repo
has empty category or package directories that people removing packages
forgot to handle.

- Drop HttpsAvailableCheck and its related HttpsAvailable result. The network
checks should now support dynamically pinging sites to test for viability.

- Port network checks to use the requests module for http/https requests so
urllib is only used for ftp URLs.

---------------------------

0.6.6

---------------------------

- HttpsUrlAvailable: Check http URLs for https availability (not run by
default).

- MissingLicenseRestricts: Skip RESTRICT="mirror" for packages lacking SRC_URI.

- DeprecatedEapiCommand: Check for deprecated EAPI commands (e.g. dohtml usage in EAPI 6).

- BannedEapiCommand: Check for banned EAPI commands (e.g. dohtml usage in EAPI 7).

- StableRequestCheck: Use ebuild modification events instead of added events to
check for stabilization.

- Add support for filtering versioned results to only check the latest VCS and
non-VCS packages per slot.

- MissingSlotDep: Fix dep slot determination by using use flag stripped dep
atoms instead of unversioned atoms.

- Add HomepageUrlCheck and FetchablesUrlCheck network-based checks that check
HOMEPAGE and SRC_URI urls for various issues and require network access so
they aren't run by default. The ``--net`` option must be specified in order
to run them.

---------------------------

0.6.5

---------------------------

- InvalidUseFlags: Flag invalid USE flags in IUSE.

- UnknownUseFlags: Use specific keyword result for unknown USE flags in IUSE
instead of MetadataError.

- pkgcheck scan: Add ``info`` alias for -k/--keywords option and rename
errors/warnings aliases to ``error`` and ``warning``.

- Add Info result type and mark a several non-warning results as info level
(e.g. RedundantVersion and PotentialStable).

- MissingLicenseRestricts: Flag restrictive license usage missing required
RESTRICT settings.

- MissingSlotDepCheck: Properly report missing slotdeps for atom with use deps.

- pkgcheck scan: Add ``all`` alias for -c/--checks option.

- MissingSignOff: Add initial check for missing commit message sign offs.

- InvalidLicenseHeader: Add initial license header check for the gentoo repo.

- BadCommitSummary: Add initial commit message summary formatting check.

---------------------------

0.6.4

---------------------------

- Add FormatReporter supporting custom format string output.

- pkgcheck scan: Drop --metadata-xsd-required option since the related file is
now bundled with pkgcore.

- Add CsvReporter for outputting results in CSV format.

- pkgcheck scan: Add --commits option that use local git repo changes to
determine scan targets.

- DroppedUnstableKeywords: Disregard when stable target keywords exist.

- LocalUSECheck: Add test for USE flags with reserved underscore character.

- PathVariablesCheck: Drop 'into' from prefixed dir functions list to avoid
false positives in comments.

- MissingUnpackerDepCheck: Drop checks for jar files since most are being
directly installed and not unpacked.

- Make gentoo repo checks work for external gentoo repos on systems with a
configured gentoo system repo.

- UnknownFile: Flag unknown files in package directories for the gentoo repo.

---------------------------

0.6.3

---------------------------

- PathVariablesCheck: Flag double path prefix usage on uncommented lines only
to avoid some types of false positives.

- BadInsIntoCheck: flag ``insinto /usr/share/doc/${PF}`` usage for recent EAPIs
as it should be replaced by docinto and dodoc [-r] calls.

- BadInsIntoCheck: Drop old cron support.

- Skip global checks when running at cat/pkg/version restriction levels for
``pkgcheck scan``. Also, skip package level checks that require package set
context when running at a single version restriction level.

---------------------------

Page 10 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.