Package to check if private repository libraries have a public doppelgaenger with the same name. The goal is to prevent a dependency confusion attack on the PyPi ecosystem.
pip install pvpcheck==1.1.0
Created to check if private repository libraries have a matching public pypi index library name.
Designed to prevent a dependency confusion attack on the PyPi ecosystem.
The Tidelift Subscription provides access to a continuously curated stream of human-researched and maintainer-verified data on open source packages and their licenses, releases, vulnerabilities, and development practices.
Learn more →
Something wrong with this page? Make a suggestion
Export .ABOUT file for this package
Last synced: 2023-02-04 09:00:35 UTC
Login to resync this project