Statick

Latest version: v0.12.0

Safety actively analyzes 723158 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 14

0.6.2

Added

- Groovy discovery plugin and tests.
- [NPM Groovy Lint](https://nvuillam.github.io/npm-groovy-lint/) tool plugin and tests.

Fixed

- Install missing library type stubs for PyYAML.
Needed for mypy to properly identify type hints.

Removed

0.6.1

Added

- New plugin to run the `isort` tool.
Use of the `isort` tool has been added to the `self_check` level.
- All print statements where variables are referenced have been converted to `f-strings`.
- All type hints were changed from comment style to inline style.
The comment style of type hints was required when using Python 3.5.
- The `black` tool was added to the Statick package requirements file.
The `black` tool is now run for the `self_check` level.
The tool was not installable with Python 3.5.

Fixed

- Unit tests that rely on the `file` command to be present are now skipped if the file command does not exist.
These changes were developed and tested when running the unit tests in PowerShell on Windows 10.
- For testing with Actions, the installed version of Node was upgraded from v10 to v14.
Node v10 is no longer supported.
Node v14 is recommended by the developers as it is a long-term support (LTS) release.

Removed

- Deprecated discovery plugin `catkin` packages has been removed.
All functionality for discovering `catkin` packages is in the `ros` discovery plugin.
- Deprecated reporting plugin for `print_json` has been removed.
All functionality for print `json` output is in the `json_reporting_plugin`.

0.6.0

Removed

- Remove testing support for Ubuntu 16.04 and Python 3.5.
There is no guarantee Statick will work in those environments any longer.

0.5.5

This is expected to be the final release that supports Python 3.5.
Ubuntu 16.04 has reached end-of-life status.
The final release of ROS Kinetic has been made.
See <https://github.com/sscpac/statick/discussions/290> for a discussion on Python 3.5 support in Statick.

Added

- An alternate installation method that uses git+https has been described in the README.
This method is useful for local installations and when trying new changes in Docker images.

Fixed

- After upgrading the black tool there were formatting changes made to a unit test file.
Those formatting changes were applied.

0.5.4

Added

- Add new reporting plugin that will provide JSON output to the terminal and/or to a file.
To control the plugin outputs you can add the following to your existing level configuration.

yaml
levels:
x:
discovery:
discovery_plugin:
reporting:
json:
terminal: "True"
files: "True"
tool:
tool_plugin:
flags: ""


Deprecated

- The `print_json` reporting plugin is marked as deprecated and will be removed in v0.6 series.
The functionality is completely replaced with the `json` reporting plugin.

0.5.3

Added

- Add option to the `clang-format` tool to report any issues found per line.
The per line differences are shown in diff format.
This output is an alternative to the current option of a single issue per file.
The default is to still output a single issue per file.
The ability to parse `clang-format` XML output and format in diff style was borrowed from
[ament_lint](https://github.com/ament/ament_lint), developed mainly by Dirk Thomas (dirk-thomas).

Fixed

Removed

Page 5 of 14

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.