View bento-headless on Snyk Open Source Advisor

Package Health Score

48 / 100

security
Security review needed
popularity
Limited
maintenance
Inactive
community
Active

Explore Similar Packages

Popularity

Limited

GitHub Stars: 143
Forks: 10
Contributors: 20

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package bento-headless, we found that it has been starred 143 times.

Security

Security review needed

Security and license risk for latest version

Release Date: May 4, 2020
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
2
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

Proprietary

Security Policy

We found a way for you to contribute to the project! Looks like bento-headless is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Inactive

archived

Commit Frequency

No Recent Commits

Open Issues: 62
Open PR: 6
Last Release: 5 years ago
Last Commit: 3 years ago

Further analysis of the maintenance status of bento-headless based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for bento-headless is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Community

Active

Readme: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 20
Funding: No

With more than 10 contributors for the bento-headless repository, this is possibly a sign for a growing and inviting community.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: >=3.6,<4.0

Age: 5 years
Latest Release: 5 years ago
Dependencies: 13 Direct / 32 Total
Versions: 4
Maintainers: 0
Wheels: OS Independent

Readme

[alpha] A Git-aware CLI for running semgrep patterns in the developer and CI workflow.

Installation · Usage · Help & Community

Installation

Requires Python 3.6+ and Docker 19.03+. It runs on macOS and Linux.

In a Git project directory:

$ pip3 install bento-headless

Usage

Upgrading

$ pip3 install --upgrade bento-headless

Command line options

$ bentoh --help
Usage: bentoh [OPTIONS] COMMAND [ARGS]...

Options:
  -h, --help  Show this message and exit.
  --version   Show the version and exit.

Commands:
  archive  Suppress current findings.
  check    Checks for new findings.

  To get help for a specific command, run `bentoh COMMAND --help`

Run custom `semgrep` checks on staged diffs

See semgrep Configuration for how to write custom rule files

vi .bento/semgrep.yml
bentoh check

Format output as JSON

bentoh check -f json

Run on file system current state

bentoh check --all

Run on staged diffs in a directory

bentoh check src

Ignore current findings

bentoh archive

Run public semgrep checks on staged diffs

BENTO_REGISTRY=r/r2c.python bentoh check

Run checks from extensions

bentoh check -t gosec -t r2c.registry.latest

Exit codes

bentoh check may exit with the following exit codes:

0: Bento ran successfully and found no errors
2: Bento ran successfully and found issues in your code
3: Bento or one of its underlying tools failed to run

Extensions

bentoh ships with the following extensions:

Extension	Description
bandit	Finds common security issues in Python code
dlint	A tool for encouraging best coding practices and helping ensure Python code is secure
eslint	Identifies and reports on patterns in JavaScript and TypeScript
flake8	Finds common bugs in Python code
gosec	Finds security bugs in Go code
hadolint	Finds bugs in Docker files (requires Docker)
r2c.boto3	Checks for the AWS boto3 library in Python
r2c.flask	Checks for the Python Flask framework
r2c.jinja	Finds common security issues in Jinja templates
r2c.registry.latest	Runs checks from r2c's check registry (experimental; requires Docker)
r2c.requests	Checks for the Python Requests framework
shellcheck	Finds bugs in shell scripts (requires Docker)

Help and community

Need help or want to share feedback? We’d love to hear from you!

Email us at support@r2c.dev
Join #general in our community Slack
File an issue or submit a feature request directly on GitHub

We’re constantly shipping new features and improvements.

License and legal

Please refer to the terms and privacy document.

bento-headless dependencies

attrs click docker frozendict gitpython packaging pre-commit psutil pymmh3 pyyaml semantic-version tqdm validate-email

FAQs

What is bento-headless?

Git-aware utility for automated program analysis. Visit Snyk Advisor to see a full health score report for bento-headless, including popularity, security, maintenance & community analysis.

Is bento-headless popular?

The python package bento-headless receives a total of 63 weekly downloads. As such, bento-headless popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is bento-headless well maintained?

We found indications that bento-headless is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is bento-headless safe to use?

While scanning the latest version of bento-headless, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 19 December-2024, at 20:36 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP