python

Documentation

Overview

Package python scans Python wheel (.whl) and egg (.egg) archives for cryptographic library usage. It detects crypto dependencies by parsing METADATA files and scanning Python source files for import statements.

Index

• func ScanWheel(ctx context.Context, path string) ([]findings.UnifiedFinding, error)

Functions

func ScanWheel

func ScanWheel(ctx context.Context, path string) ([]findings.UnifiedFinding, error)

ScanWheel opens the wheel or egg archive at path and produces a UnifiedFinding for every cryptographic dependency detected, either via Requires-Dist metadata or Python import statements in bundled .py files.

A wheel with no METADATA and no relevant imports returns (nil, nil). The context is checked before opening the archive to honour cancellation.