opeco17 / poetry-audit-plugin

Poetry plugin for checking vulnerabilities in dependencies 🚀
MIT License
20 stars 7 forks source link

feat: add caching and telemetry options #14

Open mundanevision20 opened 7 months ago

mundanevision20 commented 7 months ago

Hi @opeco17, I just found this interesting plugin for poetry. I'm a happy user of poetry since a few days. I also discovered poetry up and tested it on this repo.

After upgrading the pip requirements I read more about the safety module. Apparently they enable telemetry by default. So I added an option to this plugin to disable this behaviour.

I also learnt that the caching of the PyUp database used by safety is apparently disabled by default. So I also added a option to cache the database for 1 hour on the hard disk (they use a JSON file in ~/.safety/cache.json sized ca. 130kb).

Unfortunately I didn't manage to get the tests working :(