google / google/osv-scanner

Python reachability

Open
#2,540 0 comments 0 reactions 1 assignee Claimed by @p1gc0rn View on GitHub
Dominant language
Go
Stars
11k
Forks
792
Avg merge
1d 20h
Merged PRs (30d)
48

Description

Support coarse reachability analysis for Python:
- Extract dependencies from manifests and lockfiles
- Go through Python source code for import statements
- Output whether dependencies are reachable or not

TODOs:
- Evaluate the current reachability algorithm
- Migrate it to OSV-Scalibr as a plugin
- Find alternative for regular expressions

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.