Spring4Shell/pyproject.toml at main · C00LN3T/Spring4Shell · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
[build-system]
requires = ["setuptools>=61.0", "wheel"]
build-backend = "setuptools.build_meta"

[project]
name = "spring2shell"
version = "2.0.0"
description = "CVE scanner and exploitation toolkit for Spring/GraphQL/React stacks"
readme = "README.md"
license = { file = "LICENSE" }
requires-python = ">=3.8"
authors = [{ name = "Spring2Shell Team" }]
keywords = ["security", "cve", "scanner", "spring", "graphql", "pentest"]
classifiers = [
    "Development Status :: 4 - Beta",
    "Environment :: Console",
    "Intended Audience :: Information Technology",
    "License :: OSI Approved :: MIT License",
    "Natural Language :: English",
    "Operating System :: POSIX :: Linux",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.8",
    "Programming Language :: Python :: 3.9",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Topic :: Security",
]
dependencies = [
    "requests>=2.31.0",
    "urllib3>=2.0.0",
    "PyYAML>=6.0.1",
    "jinja2>=3.1.3",
    "aiohttp>=3.9.0",
]

[project.optional-dependencies]
dev = [
    "pytest>=8.0.0",
    "pytest-cov>=5.0.0",
    "ruff>=0.4.0",
    "mypy>=1.10.0",
    "types-requests>=2.31.0",
    "types-PyYAML>=6.0.0",
]

[project.scripts]
spring2shell = "spring2shell.cli:main"

[tool.setuptools.packages.find]
where = ["src"]

[tool.setuptools.package-data]
"spring2shell" = ["py.typed"]

# ---------------------------------------------------------------------------
# Ruff — linter + formatter (replaces flake8, isort, black)
# ---------------------------------------------------------------------------
[tool.ruff]
target-version = "py38"
line-length = 100
src = ["src", "tests"]

[tool.ruff.lint]
select = [
    "E", "F", "W",   # pycodestyle + pyflakes
    "I",              # isort
    "UP",             # pyupgrade
    "B",              # flake8-bugbear
    "C4",             # flake8-comprehensions
    "SIM",            # flake8-simplify
    "TCH",            # flake8-type-checking
    "RUF",            # ruff-specific
]
ignore = [
    "E501",  # line-length handled by formatter
    "B008",  # do not perform function calls in default arguments
    "RUF012", # mutable class attributes
    "SIM102", # nested ifs
    "RUF002", # ambiguous docstring characters
    "RUF003", # ambiguous comment characters
]

[tool.ruff.lint.isort]
known-first-party = ["spring2shell"]

[tool.ruff.format]
quote-style = "double"
indent-style = "space"

# --------------------------------------------- g------------------------------
# MyPy — static type checking
# ---------------------------------------------------------------------------
[tool.mypy]
python_version = "3.12"
strict = false
warn_unused_ignores = true
warn_return_any = true
disallow_untyped_defs = true
ignore_missing_imports = true

# ---------------------------------------------------------------------------
# Pytest
# ---------------------------------------------------------------------------
[tool.pytest.ini_options]
testpaths = ["tests"]
addopts = [
    "--cov=spring2shell",
    "--cov-report=term-missing",
    "--cov-report=html:reports/coverage",
    "-v",
]