Statick

Latest version: v0.12.0

Safety actively analyzes 714772 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 14

0.4.8

Added

- The ROS discovery plugin now supports Python-only packages that do not contain a `CMakeLists.txt` file.
- Improved the output of the cpplint tool plugin.
When no make targets or C/C++ headers have been discovered the tool no longer gives confusing message about the
cpplint executable not being found.

0.4.7

Fixed

- Fix bug in CCCC tool plugin where an empty list of source files results in trying to print output before it is available.
The result of the bug was the Statick tool crashing.
- Fix title underlines in documentation files.
Based on sphinx linting feedback from ammaraskar/sphinx-action.

0.4.6

Added

Date: Tue Nov 17 08:17:55 2020 -0800

- Add Python 3.9 support.
All unit tests and self checks are performed using Python 3.9.
This required modifying the `self_check` configuration to disable the pylint flag `--unsubscriptable-object` due
to documented issues with pylint, Python 3.9, and type hints.
- Add new ROS discovery plugin.
- Add feature that allows discovery plugins to depend on other discovery plugins, necessary for getting additional
CMake flags from ROS discovery plugin to the CMake disocvery plugin.

Deprecated

- The catkin discovery plugin is now marked as deprecated since the ROS discovery plugin is more general.
For now both plugins run by default, but the catkin discovery plugin will be removed in a future version.

0.4.5

Added

- Generate and publish Sphinx documentation to GitHub Pages on all new releases.
- Add discovery plugin to find shell files.
- Add tool plugin for [shellcheck](https://www.shellcheck.net/).
- Update documentation to list plugin types and link to tool documentation.

Fixed

- Fix for running `cmake_discovery_plugin` with some ROS 2 packages that contain messages. (Alexander Xydes, xydesa)

0.4.4

Fixed

- The `cppcheck` and `cpplint` tool plugins no longer depend on the `make` tool plugin to run first.
The tool plugins get all of the information they need, such as source files, headers, and include directories,
from the `cmake` discovery plugin.
This greatly speeds up Statick runs that use the `cppcheck` and/or `cpplint` tools but do not use the `make` tool.
- Now we are using a configuration file for Codecov so that reports from Windows are reported with the correct path.
This allows the reports from all operating systems to be merged together, restoring prior behavior.

0.4.3

Added

- Overhaul of documentation.
README contains more structure and examples by consolidating README and GUIDE.
- Regular expression-based exceptions can now be applied to a subset of files that match a pattern ("glob").
This feature is available for both global and package exceptions.
- Custom CMake flags can be added to the CMake discovery plugin.
Those flags will be used by the Make tool plugin.
The default values have not changed, but can be overridden.
- The clang-format tool can now use either `_clang-format` or `.clang-format` as the configuration file.
If the `_clang-format` file exists then that is the configuration file that is used.
Otherwise, Statick will look for `.clang-format`.
This allows users to keep the configuration file hidden in their home directories.

Fixed

- Make tool plugin no longer causes Statick to crash if `make_targets` are missing.
- When the Black tool encountered an internal error it would silently fail as far as Statick was concerned.
Statick is now aware of internal errors from Black and reports the information as an issue.
- The exceptions module can now handle `exceptions.yaml` configuration files that are empty.

Page 7 of 14

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.