Hala Ali

icon indicating a website link www.linkedin.com/in/hala-ali-585716172

icon company VCU icon location PhD student specializing in software supply chain security, SBOM, and AI security. I focus on developing innovative security solutions at the intersection of di

Results 3 issues of Hala Ali

Fix: Parse unquoted dependencies in setup.py with .split() pattern

## Description The current `process_setup_py()` method only detects dependencies wrapped in quotes within list syntax: `pythoninstall_requires = ["django==4.2.23", "CairoSVG==2.7.1"]` However, many Python projects define dependencies using multiline strings followed by...

`--python` parameter doesn't work when using tilde (`~`) expansion in file path

1 comment

## Bug Description The `--python` parameter doesn't work when using tilde (`~`) expansion in file paths. ## Steps to Reproduce ```sbom4python --use-pip --python ~/path/to/venv/bin/python3.9 --system --sbom cyclonedx --format json --output-file...

bug

Source distribution missing requirements.txt - Installation fails from sdist

## Description The source distribution (sdist) of fsociety fails to install from source because setup.py references requirements.txt and requirements-dev.txt files that are not included in the distribution. ## Steps to...