POC of running multiple scanners on a package

[werwty]

Here's how wen can run a scanner:

1. Install the package poetry add package-name
2. Find the location of the venv poetry env info
3. the package should be at $venv/lib/python*/site-packages/package-name/

Some potential scanners we can use are: https://github.com/PyCQA/bandit https://github.com/jendrikseipp/vulture https://coverage.readthedocs.io/en/coverage-5.0.4/

Most of these will take in the code location as an argument.

Open questions:

• Once we get the reports from the scanners how can we consolidate them into a single metric (or do we keep them as separate metrics)?
• How do we determine the baseline for a "good" score vs "bad'?