{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/2"}],"enrichment":{"capability":"Dodgy scans Python source code for suspicious patterns\u2014accidental diff markers, hardcoded passwords, and secret keys\u2014using simple regular expressions to catch potentially dangerous code before it's committed.","skillfed_tags":["abandoned","pre-commit-hook","secrets-detection"],"use_cases":["Run as a pre-commit hook in open-source projects to prevent accidental exposure of API keys or credentials.","Scan legacy codebases for hardcoded secrets before migrating to a secrets-management system.","Quick baseline check in CI/CD pipelines for obvious security oversights in Python files.","Integrate into code review workflows to flag suspicious patterns before merge."],"what_it_does":"Dodgy is a lightweight static analysis tool that searches Python codebases for suspicious code patterns using regular expressions. It targets common security oversights like accidental version control markers, hardcoded passwords, and embedded API keys\u2014problems particularly dangerous in open-source projects where secrets become publicly visible. The tool is designed to run as a pre-commit hook to catch these issues before code is checked in.\n\nThe package has no runtime dependencies and installs cleanly, but it is no longer maintained. The last release was in late 2019 and the last repository commit in mid-2021. While it still functions on supported Python versions, it will not evolve to handle new secret patterns, modern Python syntax, or compatibility issues with newer language versions.","worth_installing":"No\u2014not for new projects. Dodgy is abandoned and unmaintained since 2021. For active codebases, use a modern alternative like detect-secrets, truffleHog, or a dedicated secrets scanner that receives updates. If you maintain legacy code already using dodgy and it still works on your Python version, keeping it is low-risk, but do not adopt it for new work."},"id":"dodgy","links":{"html":"https://skillfed.io/packages/dodgy","md":"https://skillfed.io/packages/dodgy.md","pypi":"https://pypi.org/project/dodgy/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2019-12-31","license_spdx":null,"license_treatment":"permissive","name":"dodgy","python_support":"unspecified","summary":"Dodgy: Searches for dodgy looking lines in Python code"},"popularity":{"monthly_downloads":672077,"position":5402,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.2.1"}