Skip to main content

AURA: Automated Updater and Restoration Agent aura-dep-agent is a Python tool that helps you safely modernize your project’s dependencies. It can also be used to maintain your dependencies in the long run and does not probe or open a PR like Dependabot; it only commits changes when the update passes your validation tests.

You give it a repository and a validation entry point (a Python script or a pytest suite). AURA then searches for newer dependency versions that still pass your validation. If an update breaks your validation, AURA does not submit that change.

Installation: pip install aura-dep-agent This installs the aura command-line tool.

Quick start: Go to your project repo cd /path/to/your-project

Make sure you have:

a requirements.txt file

either:

a Python script you can run with python your_script.py, or

a pytest test suite (for example, a tests/ folder)

Run the AURA initializer:

aura init
The wizard will:

    detect whether your project is an installable package or not

    ask how to run your validation (script path or pytest target)

    ask which Python version to use in CI

    generate:

        dependency_agent.py in your repo

        .github/workflows/aura.yml GitHub Actions workflow

Commit and push:

git add dependency_agent.py .github/workflows/aura.yml
git commit -m "Add AURA dependency agent"
git push
Run AURA in GitHub Actions

In your GitHub repo, go to the Actions tab.

Find the “AURA Speed Run” workflow.

Click “Run workflow” to start your first run.

AURA will run your validation as it explores dependency updates and only keep an update when your validation still passes.

How it works (high level): dependency_agent.py contains a configuration dictionary (AGENT_CONFIG) for your repository and a small runner that calls the AURA dependency agent.

The GitHub Actions workflow:

sets up Python

installs aura-dep-agent

runs dependency_agent.py    

The AURA agent:

proposes candidate dependency upgrades

runs your validation for each candidate

writes a summary log (for example, aura_ua_execution.log)

can commit and push a modernized requirements.txt when validation passes.

Requirements and limitations:

Requires Python 3.10+ (3.10 or 3.11 recommended).

Requires a working requirements.txt.

Requires an existing validation entry point (script or pytest); AURA does not
automatically generate full test suites.

License: This project is licensed under the MIT License.

Metadata

Release files for aura-dep-agent 0.1.9

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for aura-dep-agent 0.1.9
File Size Uploaded Provenance
aura_dep_agent-0.1.9.tar.gz 22.4 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for aura-dep-agent 0.1.9
File Interpreter ABI Platform
aura_dep_agent-0.1.9-py3-none-any.whl Python 3 none any Details

Total release size: 45.5 kB

Release files / aura_dep_agent-0.1.9.tar.gz

Download URL aura_dep_agent-0.1.9.tar.gz
Size 22.4 kB
Tags Source
SHA-256 checksum
How to use checksums
7e7c4f3e3ea60f0c5cfbeaaa7233a9f0fd6abe2146ed21ef631ba4f6ddc6792d
BLAKE2b-256 checksum
How to use checksums
7b6b394ab756d3937a83ae67c657569968a5ed42e8a0a4fecb92bbd68325320a
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.12.11

Release files / aura_dep_agent-0.1.9-py3-none-any.whl

Download URL aura_dep_agent-0.1.9-py3-none-any.whl
Size 23.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
f4c5eaf47ee4edbecc0e2cb359f23e93b15cdfdcb82d658fe803b5036635aea0
BLAKE2b-256 checksum
How to use checksums
19aac84dfc8fa41ac5aa3936220f72e1243fccdb5aa2f34418bb31395b7c8f9d
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.12.11

Security for aura-dep-agent 0.1.9

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page