Owner

PyCQA

14 indexed repositories · View on GitHub

bandit
Bandit is a tool designed to find common security issues in Python code.

Python · 8272 stars
isort
A Python utility / library to sort imports.

Python · 6954 stars
pycodestyle
Simple Python style checker in one Python file

Python · 5167 stars
flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some...

Python · 3823 stars
pyflakes
A simple program which checks Python source files for errors

Python · 1459 stars
flake8-bugbear
A plugin for Flake8 finding likely bugs and design problems in your program. Contains warnings that don't belong in pyflakes and pycodest...

Python · 1119 stars
autoflake
Removes unused imports and unused variables as reported by pyflakes

Python · 953 stars
mccabe
McCabe complexity checker for Python

Python · 681 stars
docformatter
Formats docstrings to follow PEP 257

Python · 598 stars
flake8-import-order
Flake8 plugin that checks import order against various Python Style Guides

Python · 280 stars
eradicate
Removes commented-out code from Python files

Python · 218 stars
flake8-pyi
A plugin for Flake8 that provides specializations for type hinting stub files

Python · 83 stars
bandit-action
GitHub Action to run Bandit

30 stars
vscode-bandit
A Visual Studio Code extension with support for the Bandit static analysis tool.

Python · 9 stars

Beginner friendly Everything

Open All

line-ending detection doesn't work on Windows and --help explain how to use --line-ending Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

PyCQA/isort#2453 · 4 comments · Opened Jan 20, 2026
Max Line Length in style guide ignored with python 3.14 when checking multiple files Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

PyCQA/flake8#2011 · 4 comments · Opened Jan 12, 2026
Proposed rules: encourage use of `re.compile` on constants in module scope, forbid it in function scope Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

PyCQA/flake8-bugbear#536 · Opened Jan 7, 2026
Proposed warning: `assert <generator_expression>` Open

Difficulty 4/5 3-5 days Newbie friendliness 50/100

PyCQA/flake8-bugbear#534 · 3 comments · 2 reactions · Opened Dec 17, 2025
using `xml.etree.ElementTree.fromstring` shouldn't raise errors in python versions 3.11 and up Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PyCQA/bandit#1344 · Opened Dec 15, 2025
Unexpected input 'python-version', contradicts README Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

PyCQA/bandit-action#27 · 1 comment · 1 reaction · Opened Dec 5, 2025
Add check for decompression bomb vulnerabilities Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

PyCQA/bandit#1339 · 1 comment · Opened Nov 29, 2025
Should exit with non-zero code when scanning fails Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

PyCQA/bandit#1326 · 1 reaction · Opened Nov 13, 2025
Add support for per-file rule ignores in configuration Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

PyCQA/bandit#1322 · 1 comment · 4 reactions · Opened Oct 31, 2025
Typing and formatting Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

PyCQA/pycodestyle#1302 · 3 comments · Opened Oct 29, 2025
Add Installation Guidelines in README.md Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 55/100

PyCQA/bandit#1320 · 4 comments · Opened Oct 27, 2025
`Y011` doesn't account for module-qualified values Open

type-bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

PyCQA/flake8-pyi#533 · Opened Oct 19, 2025
Diagnostics not published despite successful SARIF output (Windows, external venv) Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PyCQA/vscode-bandit#103 · 2 comments · 1 reaction · Opened Oct 7, 2025
Sarif formatter physicalLocation calculation error Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 72/100

PyCQA/bandit#1311 · 1 comment · 1 reaction · Opened Oct 6, 2025
Extract ast helpers Open

type-refactoring

PyCQA/flake8-pyi#529 · 2 reactions · 1 assignee · Opened Sep 30, 2025
Broken JUnit-like XML report files Open

bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

PyCQA/bandit#1304 · Opened Sep 25, 2025
B020 false positives with iterable attribute acess Open

bug help wanted

Difficulty 3/5 1-2 days Newbie friendliness 42/100

PyCQA/flake8-bugbear#521 · Opened Sep 24, 2025
not distinguishing sql statement with mixed stringbased query construction and sanitised parameterised sql query Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

PyCQA/bandit#1302 · Opened Sep 17, 2025
Add report formatter for Github Actions annotations Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PyCQA/bandit#1301 · 7 comments · Opened Sep 16, 2025
F542 is not a crime Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

PyCQA/pyflakes#845 · 4 reactions · Opened Sep 1, 2025
B614 False Positive when using torch.jit.load Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

PyCQA/bandit#1293 · Opened Aug 27, 2025
support alternate lines for noqa declaration of import order violations Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

PyCQA/flake8-import-order#226 · 3 comments · Opened Aug 21, 2025
DOC: E252 is not documented Open

Difficulty 1/5 Under an hour Newbie friendliness 82/100

PyCQA/pycodestyle#1294 · 1 comment · Opened Aug 5, 2025
Bandit errors are masked as problems uploading the SARIF file Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 58/100

PyCQA/bandit-action#16 · 2 comments · 5 reactions · Opened Jul 30, 2025
bandit version and documentation reference in pre-commit run Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

PyCQA/bandit#1280 · 1 comment · Opened Jun 24, 2025
`exclude` supports `./tests` but not `tests` (with the default `.` target) Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

PyCQA/bandit-action#14 · Opened Jun 13, 2025
Allow customising colours Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

PyCQA/bandit#1271 · 4 comments · 5 reactions · Opened Jun 11, 2025
Multiline summary is not split correctly Open

C: convention P: bug U: high

Difficulty 3/5 1-2 days Newbie friendliness 55/100

PyCQA/docformatter#315 · Opened May 20, 2025
Check for pseudo-Protocols in argument types Open

type-feature

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PyCQA/flake8-pyi#508 · Opened May 13, 2025
pysnmp under new ownership with breaking compatilbility Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

PyCQA/bandit#1264 · 1 comment · Opened May 5, 2025
Allow pinning Bandit version as an action input parameter? Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

PyCQA/bandit-action#13 · 1 reaction · Opened Apr 21, 2025
Consider using argparse-manpage to build the man page from argparse Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 42/100

PyCQA/bandit#1256 · Opened Apr 6, 2025
setuptools deprecation warnings Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

PyCQA/pyflakes#835 · 2 comments · Opened Mar 31, 2025
Update CI to use modern PyPy versions Open

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

PyCQA/pyflakes#828 · Opened Mar 30, 2025
Pre-commit hook unable to encode non ascii characters Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

PyCQA/bandit#1251 · Opened Mar 26, 2025
bug(standard_streams): console messages with the prefix “[main] INFO” if the configuration file in the INI format Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

PyCQA/bandit#1250 · Opened Mar 24, 2025
feature_request(verbose): “--verbose” command-line argument without the “Files excluded” section Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

PyCQA/bandit#1249 · Opened Mar 23, 2025
not removing imports when a symbol is redeclared Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 42/100

PyCQA/autoflake#321 · Opened Feb 24, 2025
blacklist cloudpickle in pickle blacklist Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

PyCQA/bandit#1236 · Opened Feb 21, 2025
`src_path` semantics needs clarification Open

documentation

Difficulty 4/5 3-5 days Newbie friendliness 48/100

PyCQA/isort#2365 · 2 comments · Opened Feb 17, 2025
Support AI powered suggestion of fixes Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

PyCQA/bandit#1214 · 2 comments · 1 reaction · Opened Dec 30, 2024
hypothesis-less environment test skip not working Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

PyCQA/mccabe#114 · 1 comment · Opened Nov 29, 2024
Test failure on 3.14 Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

PyCQA/mccabe#113 · Opened Nov 22, 2024
#nosec BXXX does not contribute to `Total lines skipped (#nosec)` Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

PyCQA/bandit#1205 · 1 comment · Opened Nov 21, 2024
f-strings marked with a `# nosec BXXX` show an incorrect warning about no failed tests appears Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PyCQA/bandit#1204 · 4 comments · 1 reaction · Opened Nov 21, 2024
pre-commit hook can't read version --> wrong URL generated Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 55/100

PyCQA/bandit#1202 · 4 comments · Opened Nov 18, 2024
Expand `B404, B602, B603 and B604` to include anyio calls Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

PyCQA/bandit#1199 · 1 reaction · Opened Nov 11, 2024
Create a control flow graph to traverse code in possible execution order Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

PyCQA/bandit#1197 · 2 comments · 1 reaction · Opened Nov 5, 2024
Bandit Skipping Directory and Unable to Output Report Error Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

PyCQA/bandit#1190 · 1 comment · Opened Oct 11, 2024
Add a custom plugin from configuration instead of setuptools Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PyCQA/bandit#1188 · 1 reaction · Opened Oct 8, 2024

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

PyCQA

Showing the newest 100

Get new issues in your inbox