aswinnnn
commented
8 months ago Hey, haven't been able to work on the latest version (and a lot of new features) because of my obligations as an asian student. Being in a country where everyone wants the same thing as you is hard, I'm talking about entrance exams. I'll work on pyscan whether or not I get to fulfill my dream. That's the nice thing about having a project, you can come back and work on it no matter where, who or how you are. Expect me by May.
aadithks
This version should introduce a lot of features that are crucial to pyscan, explained below. Listed in the order of importance.
pyscan | pyscan map: Persistent dependency network analysis; responsive to changes, scans every dependency and their dependencies with efficiency and provides a graph/map, with indicators for different levels of severity.pyscan check: help novice developers avoid installing malicious dependencies from PyPI.pyscan history: Scan history, Age analysis and Dependency evolution tracking; should show how old a dependency is, and whether its worth updating to the latest version, other analytics.pyscan common: Dependency correlation; Analyze which dependencies in different projects have common vulnerabilities. This can help identify patterns and potentially identify shared security concerns across projects, making it valuable not just for individual developers but the Python community as a whole.pyscan report: risk assessment reports.pyscan alert: custom alerts through email, Github issues or Slack.pyscan trends: vulnerability trends.pyscan score: security scorecards.[ ] parse SBOMs and KBOMs
Issues fixed