Setuptools

Latest version: v75.8.0

Safety actively analyzes 696893 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 92 of 114

3.0

Not secure
===

* Issue 125: Prevent Subversion support from creating a ~/.subversion
directory just for checking the presence of a Subversion repository.
* Issue 12: Namespace packages are now imported lazily. That is, the mere
declaration of a namespace package in an egg on ``sys.path`` no longer
causes it to be imported when ``pkg_resources`` is imported. Note that this
change means that all of a namespace package's ``__init__.py`` files must
include a ``declare_namespace()`` call in order to ensure that they will be
handled properly at runtime. In 2.x it was possible to get away without
including the declaration, but only at the cost of forcing namespace
packages to be imported early, which 3.0 no longer does.
* Issue 148: When building (bdist_egg), setuptools no longer adds
``__init__.py`` files to namespace packages. Any packages that rely on this
behavior will need to create ``__init__.py`` files and include the
``declare_namespace()``.
* Issue 7: Setuptools itself is now distributed as a zip archive in addition to
tar archive. ez_setup.py now uses zip archive. This approach avoids the potential
security vulnerabilities presented by use of tar archives in ez_setup.py.
It also leverages the security features added to ZipFile.extract in Python 2.7.4.
* Issue 65: Removed deprecated Features functionality.
* BB Pull Request 28: Remove backport of ``_bytecode_filenames`` which is
available in Python 2.6 and later, but also has better compatibility with
Python 3 environments.
* Issue 156: Fix spelling of __PYVENV_LAUNCHER__ variable.

2.2

Not secure
===

* Issue 141: Restored fix for allowing setup_requires dependencies to
override installed dependencies during setup.
* Issue 128: Fixed issue where only the first dependency link was honored
in a distribution where multiple dependency links were supplied.

2.1.2

Not secure
=====

* Issue 144: Read long_description using codecs module to avoid errors
installing on systems where LANG=C.

2.1.1

Not secure
=====

* Issue 139: Fix regression in re_finder for CVS repos (and maybe Git repos
as well).

2.1

Not secure
===

* Issue 129: Suppress inspection of ``*.whl`` files when searching for files
in a zip-imported file.
* Issue 131: Fix RuntimeError when constructing an egg fetcher.

2.0.2

Not secure
=====

* Fix NameError during installation with Python implementations (e.g. Jython)
not containing parser module.
* Fix NameError in ``sdist:re_finder``.

Page 92 of 114

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.