Version 0.4.9

Due to a security vulnerability in urllib3 <1.23, it has been updated to 1.24.1.

Version 0.4.8

Due to a security vulnerability in requests <=2.19.1, it has been updated to 2.20.0.

Version 0.4.7

@Darkheir added support for annotations (v3.5+) and variable annotations (v3.6+).

Version 0.4.6

@Darkheir added more checks for the pathlib module.

Version 0.4.5

@Darkheir added check for pathlib.

Version 0.4.4

Changes:

• Added missing verbose output for f-strings and byte strings
• Better handling of keyboard interrupts like C-c
• SourceVisitor uses config member rather than singleton instance to work correctly when the spawn method is used with multiprocessing

Version 0.4.3

Fixed multiprocessing when not using fork

On Windows, forking isn't supported and the spawn method doesn't let the spawned processes inherit state like forking does. That meant that all results to stdout, while multiprocessing, was never redelegated back to the calling, main process.

The SourceVisitor was changed to maintain its output text lines to be extractable with the minimum versions results.

Bonus: Output is now easily tied to the file it originated from. The fork-friendly version just output so the data was spliced across other threads and only when using a single process could one be certain from which file the output corresponded.

Other things:

• Detect correct format() version depending on fields used in format expression
• Improved help on verbosity and what it can provide
• Added example to README using -vv to display more results information

Version 0.4.2

• Added 124 new detection rules
• Reintroduced tracking of user-defined functions, classes and variables to reduce false positives. This was especially necessary because a lot of rules for built-in symbols, like all, any etc. were added
• Detecting usage of boolean constants (v2.2+)

Version 0.4.1

• Re-implemented function kwargs to use fully-qualified names to minimize false positives and to make it possible to have rules with the same function and argument names
• Added more detection rules

Version 0.4.0

A great overhaul has been done to keep track of names and resolve as fully-qualified names (FQNs) to minimize false positives, and converting the module member rules to only use FQNs.

User-defined symbol tracking was removed due to the FQN resolution and yielded a general speedup.

Star import detection was removed because it yielded too many false positives!