Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v0.1.7 #17

Open
wants to merge 31 commits into
base: master
Choose a base branch
from
Open

v0.1.7 #17

wants to merge 31 commits into from

Conversation

aswinnnn
Copy link
Owner

@aswinnnn aswinnnn commented Oct 21, 2023

This version should introduce a lot of features that are crucial to pyscan, explained below.
Listed in the order of importance.

  • pyscan | pyscan map: Persistent dependency network analysis; responsive to changes, scans every dependency and their dependencies with efficiency and provides a graph/map, with indicators for different levels of severity.
  • pyscan check: help novice developers avoid installing malicious dependencies from PyPI.
  • pyscan history: Scan history, Age analysis and Dependency evolution tracking; should show how old a dependency is, and whether its worth updating to the latest version, other analytics.
  • pyscan common: Dependency correlation; Analyze which dependencies in different projects have common vulnerabilities. This can help identify patterns and potentially identify shared security concerns across projects, making it valuable not just for individual developers but the Python community as a whole.
  • pyscan report: risk assessment reports.
  • pyscan alert: custom alerts through email, Github issues or Slack.
  • pyscan trends: vulnerability trends.
  • pyscan score: security scorecards.
  • known vulnerability exclusion
  • parse SBOMs and KBOMs

Issues fixed


@aswinnnn aswinnnn self-assigned this Oct 27, 2023
@aswinnnn
Copy link
Owner Author

Hey, haven't been able to work on the latest version (and a lot of new features) because of my obligations as an asian student.
Being in a country where everyone wants the same thing as you is hard, I'm talking about entrance exams. I'll work on pyscan whether or not I get to fulfill my dream. That's the nice thing about having a project, you can come back and work on it no matter where, who or how you are.
Expect me by May.

@aadithks
Copy link

this project is awesome!!! please come back soon.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants