setuppycheck: A setup.py checker
Checks for questionable practices in setup.py files.
Install
$ pip install setuppycheck
Use
[marca@marca-mac2 setuppycheck]$ setuppycheck examples/exact_pins/setup.py
WARNING: exact pin: 'requests==2.7.0'
[marca@marca-mac2 setuppycheck]$ echo $?
1
[marca@marca-mac2 setuppycheck]$ setuppycheck examples/reads_requirements_text/setup.py
WARNING: reads '/Users/marca/dev/git-repos/setuppycheck/examples/reads_requirements_text/requirements.txt' - looks like a requirements file?
You might want to look at https://caremad.io/2013/07/setup-vs-requirement/
[marca@marca-mac2 setuppycheck]$ echo $?
1
Checks
Checks that you are not using exact pins in your setup.py file – Exact pins in setup.py get baked into the packages you build and limit flexibility. Folks using your package will have to have that same exact version. If you want to update it, you have to build a new package.
Checks that you are not reading a requirements.txt file and using it to populate install_requires in setup.py. I think that people mostly do this because they don’t understand the differences between setup.py and requirements.txt so I would advise reading https://caremad.io/2013/07/setup-vs-requirement/
Metadata
Release files for setuppycheck 0.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| setuppycheck-0.0.1.tar.gz | 2.4 kB | Without provenance | Details for setuppycheck-0.0.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| setuppycheck-0.0.1-py2-none-any.whl | Python 2 | none | any | Details for setuppycheck-0.0.1-py2-none-any.whl |
Total release size: 6.7 kB
Release files / setuppycheck-0.0.1.tar.gz
| Download URL | setuppycheck-0.0.1.tar.gz |
|---|---|
| Size | 2.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
74c3c91aebde8fdfacd6f128f3901f8342b398fc7190b0c5934daeebe03d6ecf
|
|
BLAKE2b-256 checksum How to use checksums |
f241f8c356aa9a81a73d6260bd5441469ce9786d8b35b7e0aceaedab0d8cbe55
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Release files / setuppycheck-0.0.1-py2-none-any.whl
| Download URL | setuppycheck-0.0.1-py2-none-any.whl |
|---|---|
| Size | 4.3 kB |
| Tags | Python 2 |
|
SHA-256 checksum How to use checksums |
603e54f45b59a0ce7b1f6c4e19c421b1f55573ad99f472336299f26a535ed963
|
|
BLAKE2b-256 checksum How to use checksums |
05e3c51718b4b58f162ec44258e9ea893c376e1b472ca9d7d2de52647f135a5b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Security for setuppycheck 0.0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.