p0dalirius / ApacheTomcatScanner

A python script to scan for Apache Tomcat server vulnerabilities.
https://podalirius.net/
GNU General Public License v3.0
771 stars 94 forks source link

[bug] setuptools CANNOT consider this value unless `scripts` is listed as `dynamic`. #38

Closed p0dalirius closed 8 months ago

p0dalirius commented 11 months ago
* Installing packages in isolated environment... (wheel)
* Building wheel...
/tmp/build-env-06_0j8il/lib/python3.11/site-packages/setuptools/config/_apply_pyprojecttoml.py:73: _WouldIgnoreField: `scripts` defined outside of `pyproject.toml` would be ignored.
!!

        ********************************************************************************
        ##########################################################################
        # configuration would be ignored/result in error due to `pyproject.toml` #
        ##########################################################################

        The following seems to be defined outside of `pyproject.toml`:

        `scripts = ['apachetomcatscanner=apachetomcatscanner.__main__:main']`

        According to the spec (see the link below), however, setuptools CANNOT
        consider this value unless `scripts` is listed as `dynamic`.

        https://packaging.python.org/en/latest/specifications/declaring-project-metadata/

        For the time being, `setuptools` will still consider the given value (as a
        **transitional** measure), but please note that future releases of setuptools will
        follow strictly the standard.

        To prevent this warning, you can list `scripts` under `dynamic` or alternatively
        remove the `[project]` table from your file and rely entirely on other means of
        configuration.

        By 2023-Oct-30, you need to update your project and remove deprecated calls
        or your builds will no longer be supported.
        ********************************************************************************

!!
clem9669 commented 9 months ago

Hey,

I don't know it is related but while trying to install with pipx I encounter the following error message.

pipx install git+https://github.com/p0dalirius/ApacheTomcatScanner.git          
Note: Dependent package 'xlsxwriter' contains 1 apps
  - vba_extract.py
Note: Dependent package 'charset-normalizer' contains 1 apps
  - normalizer

No apps associated with package apachetomcatscanner. Try again with '--include-deps' to include apps of dependent packages, which are listed above. If you are attempting to install a
library, pipx should not be used. Consider using pip or a similar tool instead.

Cheers

p0dalirius commented 9 months ago

Hi @clem9669,

I have implemented a fix, can you try again?

Best regards,

clem9669 commented 9 months ago

Nice catch ! It is now fixed:

pipx install git+https://github.com/p0dalirius/ApacheTomcatScanner.git           
  installed package apachetomcatscanner 3.7.1, installed using Python 3.11.6
  These apps are now globally available
    - apachetomcatscanner
done! ✨ 🌟 ✨

Thanks @p0dalirius 🚀

p0dalirius commented 8 months ago

Perfect !