Simple fetcher for python package's dependencies and their CVE'S for as registered in pypi.org
for locally installed packeges use -local
for recursive search use -r
for package use -p
for version use -v
for a list of packages use -l
for a requirements.txt file use -f
examples:
[+] for locally installed packages: python DVFetcher.py -local
[+] recursive search on a list : python DVFetcher -r -l="pandas 0.22.0,numpy"
[+] information about 1 package: python DVFetcher -p="pandas" -v="0.22.0"
[+] information for requirements file in form of "package~=version" package: python DVFetcher -f=requirements.txt
Output: results.csv
col 1: name
col 2: version
col 3: dependencies
col 4: CVE'S
col 5: error, if there was an error fetching the information from pypi the field value equals to 1 otherwise, 0
Note: When running -local in a virual enviroment the script will fetch only the packeges installed in the environment,
if you wish to see the local packages consider running it locally (for example from /tmp directory)
-
Notifications
You must be signed in to change notification settings - Fork 1
SvetaLadigin/DVFetcher_python
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
About
Simple fetcher for python package's dependencies and their CVE'S for as registered in pypi.org
Topics
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published