Skip to content

Bandit not registred though with the [full] extras #728

Description

@jakob1379
❯ uv tool install desloppify[full]
Resolved 12 packages in 1ms
Installed 12 packages in 11ms
 + bandit==1.9.4
 + defusedxml==0.7.1
 + desloppify==1.0
 + markdown-it-py==4.2.0
 + mdurl==0.1.2
 + pillow==12.3.0
 + pygments==2.21.0
 + pyyaml==6.0.3
 + rich==15.0.0
 + stevedore==5.9.1
 + tree-sitter==0.26.0
 + tree-sitter-language-pack==1.6.2
Installed 1 executable: desloppify

❯ desloppify scan

Desloppify Scan (python)

  * Coverage preflight: bandit is not installed — Python-specific security checks will be skipped.
    Repercussion: Python-specific security coverage is reduced; clean security output may miss shell injection, unsafe deserialization, and risky SQL/subprocess patterns.
    Fix: Install Bandit: pip install bandit
  Zones: config: 23, production: 2875, script: 39, test: 474, vendor: 10
  [1/17] Unused (ruff)...
         0 instances -> 0 issues
  [2/17] Structural analysis...
         206 complexity-only files below threshold (< 50)
         -> 844 structural issues

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions