Timothée Mazzucotelli

Results 1156 comments of Timothée Mazzucotelli

But, aren't all Python packages subject to dependency compromission? Do you mean that because safety is a security tool, it should take the extra step of vendoring dependencies? Note that...

> I am suggesting safety track vetted versions of all of their dependencies in their repository and package. By doing that there is no way for a dependency author to...

There's a typo. You'd still need to write ```python upper_version = cve_result.get('cve_reports')[0].get('upper_version') ``` I'd say the first dictionary is not necessary: ```json [ { "package_name": "jinja", "upper_version": "

> One benefit of using dictionaries instead of lists/arrays though would be that user code would not rely on the order of elements, but rather get them by name, making...

For reference: - issue in pyup: https://github.com/pyupio/pyup/issues/332 - issue in dparse: https://github.com/pyupio/dparse/issues/36

I'm now using ``` poetry export -f requirements.txt | safety check --stdin ``` ...instead. - `pip freeze` was also showing the current package as an editable install, that I had...

You can use the `dot` attribute of the diagram to get its contents as PNG or other formats: `png = diagram.dot.pipe(format="png")`.

```python from contextlib import suppress from diagrams import Diagram from diagrams.k8s.clusterconfig import HPA from diagrams.k8s.compute import Deployment, Pod, ReplicaSet from diagrams.k8s.network import Ingress, Service # unfortunately it seems there's no...

Example message in ipython: ``` /usr/local/lib/python3.6/site-packages/imbox/imap.py in connect(self, username, password) 35 36 def connect(self, username, password): ---> 37 self.server.login(username, password) 38 self.server.select() 39 logger.debug("Logged into server {} and selected mailbox...

@Phillip-M-Feldman are you still planning to work on this? @tk0miya you added this issue to the 3.0.0 milestone: are you going to implement it?