Skip to content

Manage direct dependency versions #583

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Jul 11, 2025
Merged

Manage direct dependency versions #583

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
3a3fe8b
Update urllib3 dependency
ikretz Jul 11, 2025
2dba96f
Fix Semgrep at 1.121.0
ikretz Jul 11, 2025
3d97b23
Remove unused Setuptools dependency
ikretz Jul 11, 2025
7820907
Organize deps
ikretz Jul 11, 2025
cc900fd
Remove unused click-related dependencies
ikretz Jul 11, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 13 additions & 12 deletions poetry.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

32 changes: 13 additions & 19 deletions pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[tool.poetry]
name = "guarddog"
description = "GuardDog is a CLI tool to Identify malicious PyPI packages"
description = "GuardDog is a CLI tool for identifying malicious open source packages"
authors = ["Ellen Wang", "Christophe Tafani-Dereeper"]
license = "Apache-2.0"
readme = "pypi.rst"
Expand All @@ -11,33 +11,29 @@ version = "0.0.0"
guarddog = "guarddog.cli:cli"

[tool.poetry.dependencies]
click = "^8.1.3"
configparser = ">=5.3,<8.0"
disposable-email-domains = ">=0.0.103,<0.0.121"
prettytable="^3.6.0"
python = ">=3.10,<4"
semgrep = "^1.102.0"
requests = "^2.29.0"
python-dateutil = "^2.8.2"
click = "^8.1.3"
click-option-group = "^0.5.5"
colorama = "^0.4.6" # used by click
urllib3 = "2.3.0"
python-whois = ">=0.8,<0.10"
termcolor = "^2.1.0"
tarsafe = "^0.0.5"
semantic-version = "^2.10.0"
pyyaml = "^6.0"
# 1.12+ requires new version of libgit2 which is not avaiable in Alpine
pygit2 = ">=1.11,<1.18"
configparser = ">=5.3,<8.0"
prettytable="^3.6.0"
pyyaml = "^6.0"
requests = "^2.29.0"
semantic-version = "^2.10.0"
semgrep = "1.121.0"
tarsafe = "^0.0.5"
termcolor = "^2.1.0"
urllib3 = "^2.5.0"
yara-python = "^4.5.1"
disposable-email-domains = ">=0.0.103,<0.0.121"
setuptools = ">=70.3,<79.0"

[tool.poetry.group.dev.dependencies]
mypy = "^1.4.1"
coverage = "^7.2.7"
flake8 = ">=5.0.4,<8.0.0"
mypy = "^1.4.1"
pytest = ">=7.4,<9.0"
setuptools = ">=65.6.3,<79.0.0"
pytest-mock = "^3.11.1"
sarif-tools = ">=2,<4"

Expand All @@ -53,5 +49,3 @@ testpaths = [
[build-system]
requires = ["poetry-core>=1.0.0"]
build-backend = "poetry.core.masonry.api"


18 changes: 9 additions & 9 deletions requirements-dev.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -174,9 +174,9 @@ charset-normalizer==3.4.2 ; python_version >= "3.10" and python_version < "4" \
click-option-group==0.5.7 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:8dc780be038712fc12c9fecb3db4fe49e0d0723f9c171d7cda85c20369be693c \
--hash=sha256:96b9f52f397ef4d916f81929bd6c1f85e89046c7a401a64e72a61ae74ad35c24
click==8.1.8 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:63c132bbbed01578a06712a2d1f497bb62d9c1c0d329b7903a866228027263b2 \
--hash=sha256:ed53c9d8990d83c2a27deae68e4ee337473f6330c040a31d4225c9574d16096a
click==8.2.1 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:27c491cc05d968d271d5a1db13e3b5a184636d9d930f148c50b038f0d0646202 \
--hash=sha256:61a3265b914e850b85317d0b3109c7f8cd35a670f963866005d6ef1d5175a12b
colorama==0.4.6 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
--hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
Expand Down Expand Up @@ -1271,9 +1271,9 @@ semgrep==1.121.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:5ed5d1490c38f58f683fd10c5ee16515336424c7e70d158a7e6e3821b2b30485 \
--hash=sha256:dc697f87f98ae3538018cc57058054705385351655150360f89b3f1c0da2e5d9 \
--hash=sha256:e427dd2e2432263b7a243f14738e6879bfe08bb086932b37230e86cd67de0398
setuptools==78.1.1 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:c3a9c4211ff4c309edb8b8c4f1cbfa7ae324c4ba9f91ff254e3d305b9fd54561 \
--hash=sha256:fcc17fd9cd898242f6b4adfaca46137a9edef687f43e6f78469692a5e70d851d
setuptools==80.9.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:062d34222ad13e0cc312a4c02d73f059e86a4acbfbdea8f8f76b28c99f306922 \
--hash=sha256:f36b47402ecde768dbfafc46e8e4207b4360c654f1f3bb84475f0a28628fb19c
six==1.17.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274 \
--hash=sha256:ff70335d468e7eb6ec65b95b99d3a2836546063f63acc5171de367e834932a81
Expand All @@ -1289,9 +1289,9 @@ tomli==2.0.2 ; python_version >= "3.10" and python_version < "4" \
typing-extensions==4.14.1 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:38b39f4aeeab64884ce9f74c94263ef78f3c22467c8724005483154c26648d36 \
--hash=sha256:d1e1e3b58374dc93031d6eda2420a48ea44a36c2b4766a4fdeb3710755731d76
urllib3==2.3.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:1cee9ad369867bfdbbb48b7dd50374c0967a0bb7710050facf0dd6911440e3df \
--hash=sha256:f8c5449b3cf0861679ce7e0503c7b44b5ec981bec0d1d3795a07f1ba96f0204d
urllib3==2.5.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760 \
--hash=sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc
wcmatch==8.5.2 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:17d3ad3758f9d0b5b4dedc770b65420d4dac62e680229c287bf24c9db856a478 \
--hash=sha256:a70222b86dea82fb382dd87b73278c10756c138bd6f8f714e2183128887b9eb2
Expand Down
18 changes: 9 additions & 9 deletions requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -174,9 +174,9 @@ charset-normalizer==3.4.2 ; python_version >= "3.10" and python_version < "4" \
click-option-group==0.5.7 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:8dc780be038712fc12c9fecb3db4fe49e0d0723f9c171d7cda85c20369be693c \
--hash=sha256:96b9f52f397ef4d916f81929bd6c1f85e89046c7a401a64e72a61ae74ad35c24
click==8.1.8 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:63c132bbbed01578a06712a2d1f497bb62d9c1c0d329b7903a866228027263b2 \
--hash=sha256:ed53c9d8990d83c2a27deae68e4ee337473f6330c040a31d4225c9574d16096a
click==8.2.1 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:27c491cc05d968d271d5a1db13e3b5a184636d9d930f148c50b038f0d0646202 \
--hash=sha256:61a3265b914e850b85317d0b3109c7f8cd35a670f963866005d6ef1d5175a12b
colorama==0.4.6 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
--hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
Expand Down Expand Up @@ -581,9 +581,9 @@ semgrep==1.121.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:5ed5d1490c38f58f683fd10c5ee16515336424c7e70d158a7e6e3821b2b30485 \
--hash=sha256:dc697f87f98ae3538018cc57058054705385351655150360f89b3f1c0da2e5d9 \
--hash=sha256:e427dd2e2432263b7a243f14738e6879bfe08bb086932b37230e86cd67de0398
setuptools==78.1.1 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:c3a9c4211ff4c309edb8b8c4f1cbfa7ae324c4ba9f91ff254e3d305b9fd54561 \
--hash=sha256:fcc17fd9cd898242f6b4adfaca46137a9edef687f43e6f78469692a5e70d851d
setuptools==80.9.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:062d34222ad13e0cc312a4c02d73f059e86a4acbfbdea8f8f76b28c99f306922 \
--hash=sha256:f36b47402ecde768dbfafc46e8e4207b4360c654f1f3bb84475f0a28628fb19c
six==1.17.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274 \
--hash=sha256:ff70335d468e7eb6ec65b95b99d3a2836546063f63acc5171de367e834932a81
Expand All @@ -599,9 +599,9 @@ tomli==2.0.2 ; python_version >= "3.10" and python_version < "4" \
typing-extensions==4.14.1 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:38b39f4aeeab64884ce9f74c94263ef78f3c22467c8724005483154c26648d36 \
--hash=sha256:d1e1e3b58374dc93031d6eda2420a48ea44a36c2b4766a4fdeb3710755731d76
urllib3==2.3.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:1cee9ad369867bfdbbb48b7dd50374c0967a0bb7710050facf0dd6911440e3df \
--hash=sha256:f8c5449b3cf0861679ce7e0503c7b44b5ec981bec0d1d3795a07f1ba96f0204d
urllib3==2.5.0 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760 \
--hash=sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc
wcmatch==8.5.2 ; python_version >= "3.10" and python_version < "4" \
--hash=sha256:17d3ad3758f9d0b5b4dedc770b65420d4dac62e680229c287bf24c9db856a478 \
--hash=sha256:a70222b86dea82fb382dd87b73278c10756c138bd6f8f714e2183128887b9eb2
Expand Down