audit-packs-evidence

Audit-Packs Banner

audit-packs-evidence provides codebase metadata extraction, evidence enrichment, and compliance-specific detection agents for the audit-packs ecosystem.

⚠️ IMPORTANT: This is a sub-package of the audit-packs compliance mapping toolkit. It is NOT designed to be run as a standalone CLI tool. If you are looking for the main CLI and GitHub Action scanner execution engine, please install and refer to audit-packs.

📦 Installation

Install this package via pip if you are constructing custom evidence collection or developing additional detection agents:

pip install audit-packs-evidence

🛠️ API Surface & Modules

Module	Key API Exports	Description
`audit_packs_evidence.evidence`	`enrich()`, `fetch_pr_context()`, `evidence_confidence()`	Fetches Git, PR, and local file context to attach cryptographic/audit-ready evidence strings.
`audit_packs_evidence.agents`	`DetectionAgent` (ABC), `build_agents(frameworks, packs_dir)`, `GDPRAgent`, `HIPAAAgent`, `SOC2Agent`, `FedRAMPAgent`, `OrgPolicyAgent`, `DataFlowAgent`, `Nist80053Agent`	Abstract base class and factory for framework-specific detection agents running heuristics not coverable by traditional static engines.

🔍 Specialized Detection Agents

Some compliance controls require auditing codebase configuration states that standard IaC tools do not cover. The package bundles programmatic agents:

Nist80053Agent: Automatically scans configuration manifests (such as requirements.txt, pyproject.toml, package.json, and Cargo.toml) to detect unpinned dependencies and wildcards, mapping findings directly to the NIST SI-2 (Flaw Remediation) control.
DataFlowAgent: Runs source-to-sink dependency flow tracing to measure flow-sensitive compliance risks.

📦 Ecosystem Architecture

audit-packs is built as a modular ecosystem consisting of five Python packages:

Package	PyPI Link	Role	Standalone?
`audit-packs`	pypi	Main CLI & Action entrypoint	Yes
`audit-packs-core`	pypi	Primitives, diff parsing, normalization	No
`audit-packs-mapping`	pypi	Compliance pack loader & OSCAL exporter	No
`audit-packs-evidence`	pypi	Evidence collectors & heuristic agents	No
`audit-packs-ai`	pypi	LLM consensus & confidence scoring	No

Main GitHub Repository: https://github.com/prakharsingh/audit-packs
Documentation & Setup: docs/SETUP.md
Issue Tracker: https://github.com/prakharsingh/audit-packs/issues

📄 License

This library is licensed under the Apache-2.0 License. See the LICENSE file in the main repository for details.

Metadata

Release files for audit-packs-evidence 0.9.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for audit-packs-evidence 0.9.0
File	Size	Uploaded
audit_packs_evidence-0.9.0.tar.gz	12.8 kB	Jul 10, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for audit-packs-evidence 0.9.0
File	Interpreter	ABI	Platform	Reset
audit_packs_evidence-0.9.0-py3-none-any.whl 11.8 kB Jul 10, 2026	Python 3	none	any	Details

Total release size: 24.6 kB

Release files / audit_packs_evidence-0.9.0.tar.gz

Download URL	audit_packs_evidence-0.9.0.tar.gz
Size	12.8 kB
Tags	Source
SHA-256 checksum How to use checksums	`dc23feda36e350a316269b1f3e04679cd119a6ce7d9c4fdd128a3c946a2fa7bf`
BLAKE2b-256 checksum How to use checksums	`717b238aa9077c6cbb2bfb1bb2fe5851365692b95f103d122f714203b9f3777a`
Upload date	Jul 10, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.1.0 CPython/3.13.13`

Release files / audit_packs_evidence-0.9.0-py3-none-any.whl

Download URL	audit_packs_evidence-0.9.0-py3-none-any.whl
Size	11.8 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`b08a27042779c4bcc6dbababe53fb1ab99f080ab406904d04bf9e6ace4e5bdfd`
BLAKE2b-256 checksum How to use checksums	`f56ecb6b1828206f3f7ed4b9a35a0dce04291e5c1e4af31babc201026e5e68b1`
Upload date	Jul 10, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.1.0 CPython/3.13.13`