Statick

Latest version: v0.12.0

Safety actively analyzes 723177 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 14

0.8.1

Fixed

- Update pylint configurations to not disable bad-continuation.
Pylint is warning that that option is no longer available.

0.8.0

Bugs were fixed in the `cccc` and `isort` tool plugins.
The nature of the bugs in each tool resulted in under-reporting of issues discovered by using the tools.
By fixing the tool plugins it is possible that users may find that more issues are now discovered using
the same tool configurations as before.
If a user does not want to fix the additional warnings yet they can pin the version of Statick to `statick<=0.7`.

Added

- [Code Climate](https://github.com/codeclimate/platform/blob/master/spec/analyzers/SPEC.md#data-types) reporting plugin.
This plugin can be used to provide output in GitLab merge requests via the
[Code Quality](https://docs.gitlab.com/ee/user/project/merge_requests/code_quality.html#implementing-a-custom-tool)
feature. (416)
- List of existing reporting plugins to README. (417)
- Survey of metrics for software quality assurance to docs. (413)

Changed

- Update Docker image tag to remove the `v` prefix. (409)

Fixed

- Support for user flags passed to the isort tool (414).
- Collect output of CCCC tool for each file individually instead of using the output from the last file it ran on. (412)
NOTE: This change will likely result in more issues being found by this tool.

0.7.2

Fixed

- Add deprecated module to the required install dependencies.
Fixes crash when running Statick.

0.7.1

Added

- A level can inherit from multiple child levels.
This makes it easier to tailor levels for specific file types and tools, then combine the targeted levels into a
more comprehensive level for projects that have heterogeneous file types.

Fixed

- Ensure file type key is in package information before reading the variable.
This makes all the tool plugins consistent in how they read in package information.
- Change test workflow to not fail if Codecov upload fails.
Codecov uploads are not stable and result in false Action failures.

Deprecated

- When using the `inherits_from` flag for a level the flag should be a list instead of a string.
This change was made to support levels that can inherit from multiple child levels.
Support for string `inherits_from` flags will continue through the v0.7 releases.
The README and unit tests have example of how to specify the `inherits_from` flag as a list.

0.7.0

Removed

- Drop support for Python 3.6 due to end-of-life of that distribution.
See <https://endoflife.date/python>.
To continue using Statick with Python 3.6 [pin the version](https://pip.pypa.io/en/stable/user_guide/)
used to the `0.6` tags.
An example is at the discussion at <https://github.com/sscpac/statick/discussions/376>.

0.6.3

Added

- Tests run on Python 3.10.
- Docker image created and published on each new release.
Image forms the basis of the new Statick Github Action.
See <https://github.com/sscpac/statick-action>. (Greg Kogut, gregtkogut)
- Test workflow runs on a weekly, scheduled timer. (Greg Kogut, gregtkogut)
- Test workflow can be manually triggered to run. (Greg Kogut, gregtkogut)
- Stand-alone Python packages are discovered as part of running Statick in workspace mode.
A Python package is identified as any directory containing a file named `setup.py` or `pyproject.toml`.

Fixed

- Explicitly specify `encoding` when using the `open` command on files, as recommended by pylint. (Greg Kogut, gregtkogut)

Removed

- Skip some unit tests for the clang-tidy tool on Windows.

Page 4 of 14

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.