Vermin

Latest version: v1.6.0

Safety actively analyzes 688944 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 9

1.0.1

Not secure
* Fixed regression when using `--versions` (58)
* Added project linters: [pylint](https://www.pylint.org/) and [pyroma](https://github.com/regebro/pyroma)
* Improvements based on new linter findings
* Switched from Travis CI to GitHub Actions that are much faster to start and complete

Appreciated feedback from ThomDietrich.

1.0.0

Not secure
*Since the project is almost 3 years old, it's time for version 1.0.0!*

* Python 3.9 language support and rules
* Added 253 rules
* Detect `dict` union and `dict` union merge
* Support detection `|` and `|=` of builtin types
* Detect `removeprefix` and `removesuffix` on `str`, `bytes`, and `bytearray`
* Detect builtin generic type annotations
* Detect relaxed decorators (51)
* Detect `novermin`/`novm` comments correctly on indented single lines (47)
* Display problematic context when incompatible versions are found (49)
* Fixed cases of incorrect member-to-module resolving (53)
* Fixed builtin generic type annotations detection for FQNs (54)
* Add minimum versions for function decorators and class decorators (55)
* Parsable format that can be used with third-party software: `--format parsable` (48)
* Expose detection and source code visitation API (**experimental!**)
* Detect async for-loops (3.6)
* Detect module `__dir__()` and `__getattr__(name)`
* Added long arguments: `--quiet`, `--target`, `--processes`, `--ignore`, `--lax`
* Added `-V` short form of `--version`
* Convert Config to not be a singleton
* Fixed line numbers of annotations and literal variable annotations
* Sort verbose output results for line/column numbers when present
* General processing speedups
* Improved unit test framework

Appreciated feedback and contributions from gousaiyang and CendioOssman.

0.10.5

Not secure
* Fixed processing to also work with spawn (46)
Since Python 3.8+, the [start method](https://docs.python.org/3/library/multiprocessing.html#contexts-and-start-methods) used on macOS was changed from `fork()` to `spawn()`. This had the side-effect of all invocations of `process_individual()` wouldn't inherit the config context and thus would fail to detect properly, especially when using backports. But it was fixed by reestablishing the config context if "spawn" is used as start method, which means it works with `fork()` and `spawn()` alike.

* Fixed symbol `Y.z` detection with module name from `import X as Y`, like:
py
import multiprocessing as mp
mp.get_start_method()


Thanks to adamjstewart for reporting 46!

0.10.4

Not secure
* Detect member usage in raise expressions and except handlers (45)
* Fixed kwarg detection with nested calls (44)
* Tokenize comment segments for exclusions detection (43)
* Speed up ` novermin`/` novm` comment searching (roughly 8-14%)
* Added missing ` novm`
* Improved test coverage
* Removed unused code
* Added `.editorconfig` (https://editorconfig.org/)

Thanks to gousaiyang for reporting 43, 44, and 45!

0.10.3

Not secure
Fixed 42 by ignoring non top-level imports, like `.typing`, `..a` etc., since they are relative and refer to local packages instead.

Thanks to gousaiyang for reporting it!

0.10.2

Not secure
* Disable fstring self-doc detection by default (39)
* This is done since the built-in AST cannot distinguish `f'{a=}'` from `f'a={a}'`, for instance, because it optimizes some information away. And this incorrectly marks some source code as using fstring self-doc when only using general fstring.
* fstring self-doc detection can be enabled via `--feature fstring-self-doc`, though it is seen as unstable at this point
* Correctly enumerate backport modules for stringification (it was correct but now it isn't using a hardcoded list of modules to determine maximum string lengh)
* Fixed security advisory by upgrading bleach from 3.1.1 to 3.1.2 (GHSA-m6xf-fq7q-8743) and 3.1.2 to 3.1.4 (GHSA-vqhp-cxgc-6wmm)
* Updated Arch Linux (AUR) installation (41)

Page 4 of 9

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.