search

tox-dev / pipdeptree

A command line utility to display dependency tree of the installed Python packages
https://pypi.python.org/pypi/pipdeptree
MIT License
2.73k stars 147 forks source link

OSS-Fuzz Integration #376

Open ennamarie19 opened 3 weeks ago

ennamarie19 commented 3 weeks ago

Hello, My name is McKenna Dallmeyer and I would like to submit pipdeptree to OSS-Fuzz.

If you are not familiar with the project, OSS-Fuzz is Google's platform for continuous fuzzing of Open Source Software.

In order to get the most out of this program, it would be greatly beneficial to be able to merge-in my fuzz harness and build scripts into the upstream repository and contribute bug fixes if they come up. Is this something that you would support me putting the effort into?

Thank you!

kemzeb commented 2 weeks ago

Hi @ennamarie19! I'll need to do some research on oss-fuzz (and fuzz testing in general) to see if this is something that would be useful to pipdeptree. When I get the time, I'll let you know what I think