Support Python packages that aren't on PyPI
Open
Nobody has claimed this yet.
dynamic analysis
enhancement
- Dominant language
- Go
- Stars
- 912
- Forks
- 74
- PR merge metrics
- No merged PRs in 30d
Description
Packages such as https://github.com/ytisf/PyExfil have not been updated on PyPI and the current installation instructions recommend cloning from GitHub and running pip setup.py install. It would be nice if we could support analysis of Python packages with this kind of installation flow.
It's also released as a .zip file with a nonstandard structure
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the installation flow for the linked PyExfil package, including its GitHub source and nonstandard .zip layout. Then inspect how package-analysis currently obtains and analyzes Python packages; done means packages using this flow can be analyzed successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100