search

pyupio / safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
https://safetycli.com/product/safety-cli
MIT License
1.66k stars 141 forks source link

safety-schemas repo? #494

Open dotlambda opened 5 months ago

dotlambda commented 5 months ago

It seems like https://pypi.org/project/safety-schemas/ was only published on PyPI. It would be nice if you could also publish its git repository.

yeisonvargasf commented 5 months ago

@dotlambda, yes, we will publish safety-schemas, despite I can't give you any ETA on that yet, but we will publish it once it is ready to be used/integrated for third party Python tools; at the moment, it lacks enough documentation for external usage.

I'll keep this issue open until we publish the safety-schemas repo.

hugovk commented 3 months ago

packaging 24.0 has been released:

safety-schemas requires packaging<=23.0: This causes warnings:

ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
safety-schemas 0.0.1 requires packaging<=23.0,>=21.0, but you have packaging 23.2 which is incompatible.
safety-schemas 0.0.1 requires pydantic<2.0.0,>=1.10.12, but you have pydantic 2.6.4 which is incompatible.

Please could you update, or better yet, remove the upper version pin? (See https://iscinumpy.dev/post/bound-version-constraints/ for the long version against upper pins.)

Would be nice to update/remove the pydantic, but that might be harder?