- Current unstable version
- Avoid 1.10.2post1 bug with pyup updates
- Provide CVSS values on full report for CVEs (requires a premium PyUp subscription)
- Fixed used DB wrong info
- Support line breaks on advisories
- Reduced Docker image and Binary size
- Added bare and json outputs to license command
- Added README information about Python 2.7 workaround
- Adjusted some pricing information
- Fixed MacOS binary build through AppVeyor
- Added the ability to check packages licenses (requires a premium PyUp subscription)
- Dropped Python 2.7 support, requiring Python 3.5+
- Binary adjustments and enhancements on top of reported vulnerability
- Using tox to help with local tests against different Python versions
- Fixed a hidden import caused the binary to produce errors on Linux.
- Safety is now available as a binary release for macOS, Windows and Linux.
- Wrap words in full report (Thanks @mgedmin)
- Added Dockerfile and readme instructions (Thanks @ayeks)
- Remove API dependency on pip (Thanks @benjaminp)
- Update cryptography dependency from verision 1.9 to version 2.3 due to security vulnerability
- Allows both unicode and non-unicode type encoding when parsing requriment files
- Fixed unicode error
- Fixed a packaging error with the dparse dependency
- Safety now support pip 10
- Safety now shows a filename if it finds an unpinned requirement. Thanks @nnadeau
- Removed official support for Python 2.6 and Python 3.3. Thanks @nnadeau
- Fixed an error that caused the CLI to fail on requirement files/stdin.
- Added an indicator which DB is currently used
- Added a package count how many packages have been checked
- Allow multiple version of the same library. Thanks @thatarchguy
- Fixed an error on unpinned VCS requirements. This is a regression, see pyupio#72
- Internal refactoring. Removed dependency on setuptools and switched to the new dparse library.
- Fixed a bug where absence of
stty
was causing a traceback insafety check
on Python 2.7 for Windows.
- Added the ability to ignore one (or multiple) vulnerabilities by ID via the --ignore/-i flag.
- Added --bare output format.
- Added a couple of help text to the command line interface.
- Fixed a bug that caused requirement files with unpinned dependencies to fail when using
a recent setuptools release.
- Added JSON as an output format. Use it with the --json flag. Thanks @Stype.
- Fixed terminal size detection when fed via stdin.
- Compatibility release. Safety should now run on macOs, Linux and Windows with Python 2.7, 3.3-3.6.
Python 2.6 support is available on a best-effort basis on Linux.
- Fixed another error on Python 2. The fallback function for get_terminal_size wasn't working correctly.
- Fixed an error on Python 2, FileNotFoundError was introduced in Python 3.
- Added terminal size detection. Terminals with fewer than 80 columns should now display nicer reports.
- Added an option to load the database from the filesystem or a mirror that's reachable via http(s).
This can be done by using the --db flag.
- Added an API Key option that uses pyup.io's vulnerability database.
- Added an option to cache the database locally for 2 hours. The default still is to not use the cache. Use the --cache flag.
- Made the requirements parser more robust. The parser should no longer fail on editable requirements and requirements that are supplied by package URL.
- Running safety requires setuptools >= 16
- Fixed a bug where not all requirement files were read correctly.
- Added option to read requirements from files.
- Filter out non-requirements when reading from stdin.
- Added option to read from stdin.
- Fix import errors on python 2.6 and 2.7.
- Fix packaging bug.
- Releasing first prototype.
- First release on PyPI.