dependency-check / dependency-check/DependencyCheck
Support .pyz and .pyzw "Python ZIP Application" files
Open
enhancement
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
[PEP 0441](https://www.python.org/dev/peps/pep-0441/) describes ZIP application files. For the easy case, of .pyz and .pyzw archives that contain source code (.py files), this should be as simple as adding the two extensions to `ZIPPABLES` in [ArchiveAnalyzer](https://github.com/jeremylong/DependencyCheck/blob/master/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/ArchiveAnalyzer.java).
For the more difficult case where .pyc and .pyo files are in the archive, it will be necessary to invoke a Python decompiler.
Contributor guide
Assessment
This issue has not been assessed yet.