Vermin

Latest version: v1.6.0

Safety actively analyzes 688931 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 9

1.2.1

Not secure
- Fix for only showing files with violating results when using `--violations` (74)

Advisories:
- Upgraded urllib3 1.25.10 to 1.26.5 (GHSA-q2q7-5pp4-w6pg)

Appreciated feedback from alalazo.

1.2.0

Not secure
- Target versions violations linting mode: `--violations` (57, [README section](https://github.com/netromdk/vermin#linting-showing-only-target-versions-violations))
- Fix crash on adding exclusion after overriding config from another (68)
- Fix member detection in exception handlers and raise expressions (69)
- Detect `nonlocal` and user-defined `long` (70)
- Capture assignment targets as user-defines
- Detect ellipsis literal out of slices (71)
- Detect set literals and set comprehensions (72)
- Detect multiple context expressions in a `with` statement (73)

Appreciated feedback and contributions from gousaiyang.

1.1.1

Not secure
- Don't evaluate annotations by default, added `--eval-annotations` (66)
- Detect user function decorators (67)
- Stop using Python 3.4 which isn't supported with GitHub Actions anymore

Advisories:
- Upgraded PyYAML 5.3.1 to 5.4 ([GHSA-8q59-q68h-6hv4](https://github.com/advisories/GHSA-8q59-q68h-6hv4))
- Upgraded Pygments 2.7.2 to 2.7.4 ([GHSA-pq64-v7f5-gqh8](https://github.com/advisories/GHSA-pq64-v7f5-gqh8))
- Upgraded Bleach 3.2.1 to 3.3.0 ([GHSA-vv2x-vrpj-qqpq](https://github.com/advisories/GHSA-vv2x-vrpj-qqpq))

Appreciated feedback from gousaiyang, TylerYep, and tobbez

1.1.0

Not secure
* Config file support (56)

Vermin automatically tries to detect a config file, starting in the current working directory where it is run, following parent folders until either the root or project boundary files/folders are reached. However, if `--config-file` is specified, no config is auto-detected and loaded.

Config file names being looked for: `vermin.ini`, `vermin.conf`, `.vermin`, `setup.cfg`

Project boundary files/folders: `.git`, `.svn`, `.hg`, `.bzr`, `_darcs`, `.fslckout`

A sample config file can be found [here](https://github.com/netromdk/vermin/blob/master/sample.vermin.ini).

* Added new arguments:
* `--no-backport`
* `--no-dump`
* `--no-exclude`
* `--no-feature`
* `--no-hidden`
* `--no-ignore`
* `--no-lax`
* `--no-pessimistic`
* `--no-quiet`
* `--no-target`
* `--show-tips` to have an opposite of `--no-tips`
* `--dump` long form of `-d`
* Extended comment exclusion support (59)
* Added and fixed backports (61)
* Detect unpacking assignment (3.0)
* Fixed false positive generalized unpacking cases (63)
* Fixed magic line Python detection
* Incompatible interpretation on syntax errors using `--pessimistic` (48)
* Fixed exception cause related minimum versions (60)
* Fixed reported line of `with` statement
* Fixed solitary `novermin` border case with newline before it
* Added `txt` as excluded extension for detection
* GitHub Actions fixes
* Test and analyze on PRs too
* Finish coveralls session when all parallel tests are done
* Renamed lax mode to lax (internal)
* Extend lax mode support
* Tidy up Makefile


Appreciated feedback and contributions from gousaiyang

1.0.3

Not secure
* Fixed a file paths detection issue when using parsable format on Windows

1.0.2

Not secure
* Fixed parsable format Windows bug related to file paths
* Running tests on macOS and Windows in addition to Linux, with `pip` and `virtualenv` caching
* Improved internal testing framework with parameterized arguments for test cases
* Using version tuples in tests rather than float values in preparation for Python 3.10

Page 3 of 9

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.