DependencyConfusion

Description

This package implements a test for Dependency Confusion using pip.

The version 0.0.2 is available on test.pypi.org.
The version 0.0.2 and 666 are available on pypi.org.
In the scenario you want to install version 0.0.2 available on test.pypi.org and you use the pip --extra-index-url option to install it.
During installation, a window will open to tell you which version is being installed... theoretically version 666 available on pypi.org will be installed if your pip version is vulnerable to dependency confusion.

This package require:

pip install --extra-index-url https://test.pypi.org/simple/ DependencyConfusion

Licensed under the GPL, version 3.

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution for DependencyConfusion 666
File	Size	Uploaded
DependencyConfusion-666.tar.gz	3.5 kB	Apr 14, 2022	Details

Download URL	DependencyConfusion-666.tar.gz
Size	3.5 kB
Tags	Source
SHA-256 checksum How to use checksums	`037589b90c04e5e7d6c569cafced297ee93d5ec4de97596b8df2862ce50e69d9`
BLAKE2b-256 checksum How to use checksums	`00d908c6d91608ed3614bfc927b47593919ceb4962b0fa92f98cfdcd4b9c4e78`
Upload date	Apr 14, 2022
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/3.2.0 pkginfo/1.6.1 requests/2.25.0 setuptools/59.6.0 requests-toolbelt/0.9.1 tqdm/4.54.1 CPython/3.9.11`