AURA: Automated Updater and Restoration Agent aura-dep-agent is a Python tool that helps you safely modernize your project’s dependencies. It can also be used to maintain your dependencies in the long run and does not probe or open a PR like Dependabot; it only commits changes when the update passes your validation tests.
You give it a repository and a validation entry point (a Python script or a pytest suite). AURA then searches for newer dependency versions that still pass your validation. If an update breaks your validation, AURA does not submit that change.
Installation: pip install aura-dep-agent This installs the aura command-line tool.
Quick start: Go to your project repo cd /path/to/your-project
Make sure you have:
a requirements.txt file
either:
a Python script you can run with python your_script.py, or
a pytest test suite (for example, a tests/ folder)
Run the AURA initializer:
aura init
The wizard will:
detect whether your project is an installable package or not
ask how to run your validation (script path or pytest target)
ask which Python version to use in CI
generate:
dependency_agent.py in your repo
.github/workflows/aura.yml GitHub Actions workflow
Commit and push:
git add dependency_agent.py .github/workflows/aura.yml
git commit -m "Add AURA dependency agent"
git push
Run AURA in GitHub Actions
In your GitHub repo, go to the Actions tab.
Find the “AURA Speed Run” workflow.
Click “Run workflow” to start your first run.
AURA will run your validation as it explores dependency updates and only keep an update when your validation still passes.
How it works (high level): dependency_agent.py contains a configuration dictionary (AGENT_CONFIG) for your repository and a small runner that calls the AURA dependency agent.
The GitHub Actions workflow:
sets up Python
installs aura-dep-agent
runs dependency_agent.py
The AURA agent:
proposes candidate dependency upgrades
runs your validation for each candidate
writes a summary log (for example, aura_ua_execution.log)
can commit and push a modernized requirements.txt when validation passes.
Requirements and limitations:
Requires Python 3.10+ (3.10 or 3.11 recommended).
Requires a working requirements.txt.
Requires an existing validation entry point (script or pytest); AURA does not
automatically generate full test suites.
License: This project is licensed under the MIT License.
Metadata
Release files for aura-dep-agent 0.1.9
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| aura_dep_agent-0.1.9.tar.gz | 22.4 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| aura_dep_agent-0.1.9-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 45.5 kB
Release files / aura_dep_agent-0.1.9.tar.gz
| Download URL | aura_dep_agent-0.1.9.tar.gz |
|---|---|
| Size | 22.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7e7c4f3e3ea60f0c5cfbeaaa7233a9f0fd6abe2146ed21ef631ba4f6ddc6792d
|
|
BLAKE2b-256 checksum How to use checksums |
7b6b394ab756d3937a83ae67c657569968a5ed42e8a0a4fecb92bbd68325320a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.11
|
Release files / aura_dep_agent-0.1.9-py3-none-any.whl
| Download URL | aura_dep_agent-0.1.9-py3-none-any.whl |
|---|---|
| Size | 23.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f4c5eaf47ee4edbecc0e2cb359f23e93b15cdfdcb82d658fe803b5036635aea0
|
|
BLAKE2b-256 checksum How to use checksums |
19aac84dfc8fa41ac5aa3936220f72e1243fccdb5aa2f34418bb31395b7c8f9d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.11
|
Security for aura-dep-agent 0.1.9
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.