ca9/pyproject.toml at main · duriantaco/ca9 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[project]
name = "ca9"
version = "0.1.4"
description = "Reduce false-positive CVE alerts by checking whether vulnerable dependency code is actually reachable"
readme = "README.md"
requires-python = ">=3.10"
license = "MPL-2.0"
keywords = ["security", "sca", "cve", "vulnerability", "reachability", "snyk", "dependabot"]
classifiers = [
    "Development Status :: 3 - Alpha",
    "Intended Audience :: Developers",
    "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Programming Language :: Python :: 3.13",
    "Topic :: Security",
    "Topic :: Software Development :: Quality Assurance",
]
dependencies = ["packaging>=21.0"]

[project.optional-dependencies]
cli = ["click>=8.0"]
mcp = ["mcp>=1.0.0"]
dev = ["pytest>=7.0", "click>=8.0", "ruff>=0.4", "tox>=4", "pre-commit>=3.0", "skylos>=3.5.2"]

[project.scripts]
ca9 = "ca9.cli:main"
ca9-mcp = "ca9_mcp.server:main"

[tool.hatch.build.targets.wheel]
packages = ["src/ca9", "ca9_mcp"]

[tool.pytest.ini_options]
testpaths = ["tests"]
pythonpath = [".", "src"]

[tool.ruff]
target-version = "py310"
line-length = 100
src = ["src", "tests"]

[tool.ruff.lint]
select = ["E", "F", "W", "I", "UP", "B", "SIM"]
ignore = [
    "E501",
    "SIM108",
    "SIM102",
]

[tool.ruff.lint.isort]
known-first-party = ["ca9", "ca9_mcp"]