4 ms·

Yeah, but for proper python support you need to handle setup.py too, which being python code is more complex. https://python-packaging.readthedocs.io/en/latest

• scrollaway 9y ago
  And setup.cfg! Example: https://github.com/HearthSim/python-hslog/blob/master/setup.cfg https://github.com/HearthSim/python-hslog/blob/master/setup....
  • nikcub 9y ago
    and Pipfile - which is what i've switched to in recent projects, example[0] Altho you can write to one of the other formats or read from it - you'd have to tell the scanner what the true build source is [0] https://github.com/kennethreitz/pipenv/blob/master/Pipfile https://github.com/kennethreitz/pipenv/blob/master/Pipfile
    • nerdwaller 9y ago
      I mentioned this elsewhere here, but check out `pipenv check`[0] and just run it in CI or as a precommit hook. [0] https://docs.pipenv.org/advanced.html#detection-of-security-vulnerabilities https://docs.pipenv.org/advanced.html#detection-of-security-...
• jdc0589 9y ago
  I imagine they are just going to pick one.