TLDR Tech / InfoSec
PySentry
PySentry is a Rust-based Python dependency vulnerability scanner capable of parsing various manifest formats like `uv.lock`, Poetry, Pipfile, `pyproject.toml`, and `requirements.txt`. It cross-references identified dependencies against the PyPA Advisory Database, PyPI JSON API, and OSV.dev. The tool also supports PEP 792 for detecting archived, deprecated, and quarantined packages, offering SARIF, JSON, or Markdown output. A `--forbid-quarantined` flag allows for blocking malware-flagged packages within CI pipelines.
Read the full story