5 projects
vulnerablecode
VulnerableCode is a free and open database of open source software package vulnerabilities because open source software vulnerabilities data and tools should be free and open source themselves.
packageurl-python
A purl aka. Package URL parser and builder
fetchcode
fetchcode is a library to reliably fetch code via HTTP, FTP and version control systems.
python-inspector
python-inspector is is a collection of utilities to collect PyPI package metadata and resolve packages dependencies.
pip-requirements-parser
pip requirements parser - a mostly correct pip requirements parsing library because it uses pip's own code.