Pkgconf

Latest version: v2.4.3.post1

Safety actively analyzes 723685 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 11

1.3.7

----------------------------

* Enhancements:
- improved diagnostics for malformed packages.

* Bug fixes:
- reject packages which contain incomplete metadata in post-parse phase.

1.3.6

----------------------------

* Enhancements:
- add many cflags to the protected set: -Wa, -Wl, -Wp, -ansi, -std=, -stdlib=,
-pedantic, -pthread, -trigraphs, -nostdinc, -nostdlibinc, -nobuiltininc.

* Bug fixes:
- handle -include cflag fragments properly.

1.3.5

----------------------------

* Bug fixes:
- fix --variable output for compatibility some broken configure scripts when they
request the same variable from multiple packages

1.3.4

----------------------------

* Bug fixes:
- fix a quoting issue exposed by the Go testsuite

1.3.3

----------------------------

* Bug fixes:
- back out disabling the dependency resolver for single-package queries, it caused
too many regressions.

* Enhancements:
- allow explicitly disabling the dependency resolver via new environment variable,
PKG_CONFIG_MINIMUM_TRAVERSE_DEPTH=1. while pkgconf could already do this using
--minimum-traverse-depth=1, other pkg-config implementations do not have this
option, so adding an environment variable allows to make better use of this
feature (other implementations won't error due to unknown option this way)

1.3.2

----------------------------

* Bug fixes:
- rewrite handling of --modversion, --print-variables and --variable to not require
the dependency resolver
- ensure we disable the dependency resolver in all cases where it is a single-package
query (1.3.1 did not go far enough)

Page 7 of 11

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.