Skip to content

Commit 57448a0

Browse files
authored
👋 Add no longer maintained section
1 parent 3b344a3 commit 57448a0

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed

Diff for: README.rst

+20
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,26 @@
1919
.. image:: https://img.shields.io/badge/Donate-Charity-orange.svg
2020
:target: https://www.againstmalaria.com/donation.aspx
2121

22+
This project is no longer maintained
23+
====================================
24+
25+
`Pyre`_ from Facebook is an amazing project that has a bright future and many smart people working on it.
26+
I would suggest, if you don't know that much about program analysis, that you understand how PyT works before diving into Pyre. Along with the `README's in most directories`_, there is the original `Master's Thesis`_ and `some slides`_.
27+
With that said, I am happy to review pull requests and give you write permissions if you make more than a few.
28+
29+
There were a lot of great contributors to this project, I plan on working on other projects like `detect-secrets`_ and others (e.g. Pyre eventually) in the future if you'd like to work together more :)
30+
31+
If you are a security engineer with e.g. a Python codebase without type annotations, that Pyre won't handle, I would suggest you replace your sinks with a secure wrapper (something like `defusedxml`_), and alert off any uses of the standard sink. You can use `Bandit`_ to do this but you will have to trim it a lot, due to the high false-positive rate.
32+
33+
.. _Pyre: https://github.com/facebook/pyre-check
34+
.. _README's in most directories: https://github.com/python-security/pyt/tree/master/pyt#how-it-works
35+
.. _Master's Thesis: https://projekter.aau.dk/projekter/files/239563289/final.pdf
36+
.. _some slides: https://docs.google.com/presentation/d/1JfAykAxR0DcJwwGfHmhrz1RhhKqYsnt5x_GY8CbTp7s
37+
.. _detect-secrets: https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md#whats-new
38+
.. _defusedxml: https://pypi.org/project/defusedxml/
39+
.. _Bandit: https://github.com/PyCQA/bandit
40+
41+
2242
Python Taint
2343
============
2444

0 commit comments

Comments
 (0)