Skip to content

SecuLens for Python 0.1.0

Pre-release
Pre-release

Choose a tag to compare

View all tags
@masahiroid masahiroid released this 08 Oct 14:55
· 13 commits to main since this release
v0.1.0
94465e6

SecuLens for Python 0.1.0 is an independent Python implementation for SBOM vulnerability matching, SPDX license policy evaluation, Python AST review and customer-facing Word/JSON reports.

  • Imports CycloneDX 1.4–1.7 JSON and SPDX 2.2/2.3 JSON; optional Syft generation supports both formats.
  • Performs local OSV matching for npm, PyPI and supported Composer versions, saves snapshots/hashes, and distinguishes incomplete coverage.
  • Reviews Python AST security candidates and function complexity without executing source.
  • Generates Japanese/English Word reports; Japanese font is bundled and embedded under SIL OFL.

Validation: 25 tests; Python 3.10, 3.13 and 3.14 CI; dependency audit; build and metadata checks; fresh wheel installation; actual Syft generation; same assessment result as TypeScript against a live OSV snapshot; all pages of the Japanese sample report visually checked.

This is an early release. Full SAST, reachability and legal compliance determinations are outside its scope. The demonstration advisory snapshot is synthetic. PyPI publication is pending account publisher configuration. Install the attached wheel with pip install seculens-0.1.0-py3-none-any.whl.

Assets 5
Loading