Skip to main content

Meta static analysis runner for Python packages

Project description

shouldi

shouldi

Usage

$ shouldi install insecure-package bandit
bandit is okay to install
Do not install insecure-package! {'safety_check_number_of_issues': 1}

Dependencies

shouldi depends on safety, pylint, and bandit being installed separately.

$ python3.7 -m pip install -U safety pylint bandit

WTF is this

shouldi is a tool that runs static analysis tools to let you know if there are any issues in any of the python packages you were thinking of installing.

shouldi is similar to things like Go Report Card.

Right now shouldi runs the following static analysis tools and complains if:

  • safety
    • Any issues are found
  • TODO: bandit
  • TODO: pylint
    • TDB (something about the number of errors)

License

shouldi is distributed under the MIT License.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

shouldi-0.0.1.tar.gz (4.8 kB view details)

Uploaded Source

File details

Details for the file shouldi-0.0.1.tar.gz.

File metadata

  • Download URL: shouldi-0.0.1.tar.gz
  • Upload date:
  • Size: 4.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/1.13.0 pkginfo/1.5.0.1 requests/2.22.0 setuptools/41.0.1 requests-toolbelt/0.9.1 tqdm/4.31.1 CPython/3.7.1

File hashes

Hashes for shouldi-0.0.1.tar.gz
Algorithm Hash digest
SHA256 800444166b67b60fdd1081f6f6d76902e39414b32882742cc1057e4e1752957b
MD5 d76861f47da3222c4c3987feb7645167
BLAKE2b-256 a933a3ed58af4df406d133c73cf97f41c2f5a3110d96fa16a3e11002e477a5ce

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page