Vermin

Latest version: v1.6.0

Safety actively analyzes 688931 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 9

1.4.0

Not secure
- **Removed deprecated lax mode entirely**
- **Vermin 1.6 will end support for py2.7**
- An actual quiet `--quiet` mode
- `--violations` can be used with `--quiet` such that nothing is shown except rule violations (85)
- Added violations aliases `--lint` and `--no-lint`
- Detect `with` statements grouped with parentheses (py3.9, 84)
- Show tip when generic/literal annotations might be in use (84)
- Add support for [pre-commit](https://pre-commit.com/) by loganswartz (#81)
- Handle `async with` similarly to `with`
- `async for` is py3.5 instead of py3.6
- Restructured tips display for better readability
- Lazy parsing of source code when needed outside the Python parser
- Don't throw away duplicates when visiting nodes (`--dump`)

**Full Changelog**: https://github.com/netromdk/vermin/compare/v1.3.3...v1.4.0

1.3.3

Not secure
- [`mock`](https://pypi.org/project/mock/) backport was added (#80)

1.3.2

Not secure
- `super()` without arguments requires v3+

1.3.1

Not secure
- Don't suppress test errors for Python 2.7, 3.4, and 3.5 with GitHub Actions
- Added kwargs rules specific to the change from v2 to v3
- With inconclusivity when using `--violations` and `--target` exit code is `0` (79)
- Yield note when not enough evidence to conclude minimum versions
- Scan top-level folders in all cases. The recent implementation of `--no-symlink-folders` didn't scan top-level folders - or input folders. That's a problem if the input folder is `/tmp` which is a symlink to `/private/tmp` on macOS, for instance. Cases such as that will now be handled correctly.
- Added and fixed rules (mostly 3.10 related) (78)

1.3.0

Not secure
- Python 3.10 support
- Added 134 rules specific to Python 3.10
- Structural pattern matching ([PEP-0634](https://www.python.org/dev/peps/pep-0634/))
- Support optional length-checking of `zip` ([PEP-0618](https://www.python.org/dev/peps/pep-0618/))
- Union types written as `X | Y` ([PEP-0604](https://www.python.org/dev/peps/pep-0604/))
- Detect mapping attribute of dict views ([bpo-40890](https://bugs.python.org/issue40890))
- Additionally testing and analyzing using Python 3.10 with GitHub Actions
- Optionally exclude parsing comments for 30-40%+ speedup. The `--no-parse-comments` argument or `parse_comments = no` config setting, can be used to disable it.
- Not scanning symlinks to folders can incur huge speedups for certain projects, especially if they
point inside a project's hierarchy. These symlinks can be included in analysis via the `--scan-symlink-folders` argument or `scan_symlink_folders = yes` config setting.

**Deprecations**
- Lax mode has been deprecated in favor of specific analysis exclusions. Will be removed in v. 1.4.

**Full Changelog**: https://github.com/netromdk/vermin/compare/v1.2.2...v1.3.0

1.2.2

Not secure
- Support exclusion of multi-line strings (76)
- Fixed erroneous detection of nested curly braces in string formatting (75)
- Fixed reported line numbers for variable/final/literal annotations
- Regularly scanning code with CodeQL via GitHub Actions

Appreciated feedback from adamjstewart.

Page 2 of 9

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.