Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

pip false positive #26

Open
geeknik opened this issue Feb 26, 2021 · 0 comments · May be fixed by #29
Open

pip false positive #26

geeknik opened this issue Feb 26, 2021 · 0 comments · May be fixed by #29

Comments

@geeknik
Copy link

geeknik commented Feb 26, 2021

Hello and thank you for a great research project. I have found that if a requirements.txt includes a package followed by a ;, it will alert on said package even if said package does exist.

Example:

affine~=2.3.0
attrs>=19.2.0
boto3>=1.2.4
click~=7.1.0
click-plugins
cligj>=0.5
enum34; python_version < "3.4"
matplotlib
numpy>=1.10
snuggs~=1.4.0
setuptools>=20.0

Result:

confused -l pip requirements.txt
Issues found, the following packages are not available in public package repositories:
 [!] enum34;
nmbro added a commit to nmbro/confused that referenced this issue Jun 27, 2021
@nmbro nmbro linked a pull request Jun 27, 2021 that will close this issue
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant