Skip to content

Fixes duplicate & incorrect version in requirements.txt & empty Upgrade To Version Suggestion #401

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Jun 4, 2025

Conversation

Sahilb315
Copy link
Contributor

Fixes #343 #344

Copy link

github-actions bot commented Mar 18, 2025

vet Summary Report

This report is generated by vet

Policy Checks

  • ❌ Vulnerability
  • ✅ Malware
  • ✅ License
  • ✅ Popularity
  • ✅ Maintenance
  • ✅ Security Posture
  • ✅ Threats

Malicious Package Analysis

Malicious package analysis was performed using SafeDep Cloud API

Malicious Package Analysis Report
Ecosystem Package Version Status Report
ECOSYSTEM_PYPI requests 2.25.1 🔗
ECOSYSTEM_PYPI bleach 3.1.2 🔗
  • ℹ️ 2 packages have been actively analyzed for malicious behaviour.
  • ✅ No malicious packages found.

Note: Some of the package analysis jobs may still be running.Please check back later. Consider increasing the timeout for better coverage.

Changed Packages

Changed Packages

  • ⚠️ [PyPI] requests@0.0.0
  • ⚠️ [PyPI] bleach@3.1.2
  • ⚠️ [PyPI] bleach@0.0.0
  • ✅ [PyPI] requests@2.25.1
Policy Violations

Packages Violating Policy

[PyPI] requests@0.0.0 🔗

  • ➡️ Found in manifest requirements.txt
  • ⚠️ Critical or high risk vulnerabilities were found
  • ⚡ Upgrade to @
  • ⚡ Upgrade to requests@2.32.3

[PyPI] bleach@3.1.2 🔗

  • ➡️ Found in manifest requirements.txt
  • ⚠️ Critical or high risk vulnerabilities were found
  • ⚡ Upgrade to @
  • ⚡ Upgrade to bleach@6.2.0

[PyPI] bleach@0.0.0 🔗

  • ➡️ Found in manifest requirements.txt
  • ⚠️ Critical or high risk vulnerabilities were found
  • ⚡ Upgrade to @
  • ⚡ Upgrade to bleach@6.2.0

@Sahilb315 Sahilb315 requested a review from abhisek March 18, 2025 16:17
Copy link

codecov bot commented Jun 4, 2025

Codecov Report

Attention: Patch coverage is 64.70588% with 12 lines in your changes missing coverage. Please review.

Project coverage is 16.41%. Comparing base (4f43177) to head (3df8819).
Report is 1 commits behind head on main.

Files with missing lines Patch % Lines
pkg/reporter/markdown_summary.go 0.00% 7 Missing ⚠️
pkg/readers/lockfile_reader.go 88.00% 2 Missing and 1 partial ⚠️
pkg/remediations/remediations.go 0.00% 2 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #401      +/-   ##
==========================================
+ Coverage   16.31%   16.41%   +0.10%     
==========================================
  Files         162      162              
  Lines       16263    16294      +31     
==========================================
+ Hits         2653     2675      +22     
- Misses      13407    13415       +8     
- Partials      203      204       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@abhisek abhisek merged commit 3d94f0f into main Jun 4, 2025
8 of 11 checks passed
@abhisek abhisek deleted the fix/#343-#344 branch June 4, 2025 04:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Duplicate & incorrect version resolution when optional dependencies are specified in requirements.txt
3 participants