lukasschwab / arxiv.py

Python wrapper for the arXiv API

MIT License

1.07k stars 120 forks source link

Use `pip-audit` to audit dependencies before merging PRs #88

Closed lukasschwab closed 2 years ago

lukasschwab commented 2 years ago

Description

Strictly updates the developer workflow.

Adds a dev dependency: trailofbits/pip-audit.
Adds a Make target for running pip-audit against requirements.txt: make audit.
Adds make audit to the python-package.yaml GitHub workflow.

Breaking changes

List any changes that break the API usage supported on master.

No changes to package behavior.

Relevant issues

List GitHub issues relevant to this change.

N/A

Checklist

[ ] ~(If appropriate) README.md example usage has been updated.~