Aura – Python source code auditing and static analysis on a large scale (2022)

by r9295 • 3 years ago

148 13 3 years ago

cik• 3 years ago

Unfortunately, there hasn't been a release since 2021, Similarly no commits to the branches master, or dev in the past ~14 months.

intense_feel5• 3 years ago

Hello, author of Aura here. The project is in fact active! But in a different branch called "ambience". Which is a very big refactor into transforming Aura (which is now designed to be run locally as tui) into server/web application. It would allow to automatically monitor and audit all used python packages in an organization by using an http reverse proxy to intercept python package installations. It's taking me currently long time to finish that big refactor as I am currently the only active developer there so apologies if the project seems to be abandoned, I'm just hesitating to merge the changes from ambience branch into main (which is what people see) as the new refactor is not stable yet as compared to master & dev as that was tested and tuned on the whole PyPI.

Very early alpha version is available here: https://ambience.sourcecode.ai if someone is interested in checking it out.

pabs33• 3 years ago

Will a command-line tool still be provided too?

tda• 3 years ago

very helpful comment, you might want to add that to the readme or a pinned issue

westurner2• 3 years ago

Could aura scan packages at the pulp pypi proxy? https://github.com/pulp

Aura – Python source code auditing and static analysis on a large scale (2022)

Related Stories