spoils (bandit extensions)
A lightweight collection of additional security checks for Bandit.
Add-ons
- B380: No path-join misuse
Detects unvalidated or unsafe usage of
os.path.join, multi-argumentpathlib.Path(...),Path(...).joinpath(...), and/path composition in your codebase.
Installation
pip install spoils
Usage
Once installed, Bandit will automatically pick up the new checks:
bandit -r your_project/
Issues will be reported with their B-number and descriptive message.
Future Add-ons
More community-driven checks are coming soon! Got an idea or contribution? Feel free to file an issue or submit a pull request.
1 maintainer
Metadata
1 maintainer
Release files for spoils 0.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| spoils-0.2.0.tar.gz | 5.1 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| spoils-0.2.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 9.5 kB
Release files / spoils-0.2.0.tar.gz
| Download URL | spoils-0.2.0.tar.gz |
|---|---|
| Size | 5.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
79f2916818ffb140bb202d5688e6cd44d6c43dd19f878cc4b192fe6ae60dd26b
|
|
BLAKE2b-256 checksum How to use checksums |
4e073150adf2a4592c40002344742ec36dc2b3280594d320222842ef352da7a4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.10.12
|
Release files / spoils-0.2.0-py3-none-any.whl
| Download URL | spoils-0.2.0-py3-none-any.whl |
|---|---|
| Size | 4.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
96fb8fba464b32cae6a57ac281019cfb7bf868e0ae945cbb4c7e896ea77cded0
|
|
BLAKE2b-256 checksum How to use checksums |
a8e3b92acafed2b769654676062398a750d733e8635d3e85684ca78333a21b9a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.10.12
|
Security for spoils 0.2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
