{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/20"},{"label":"Security","url":"https://skillfed.io/packages/category/security/3"}],"enrichment":{"capability":"PySentry scans Python projects for known security vulnerabilities by reading dependency manifests and lock files, checking them against multiple vulnerability databases, and reporting findings with severity levels and upgrade paths.","skillfed_tags":["vulnerability-scanning","ci-integration","dependency-audit"],"use_cases":["Audit a Python project in CI before deployment to catch known vulnerabilities early and fail the build if critical issues are found","Scan a requirements.txt or pyproject.toml file locally to identify outdated or vulnerable dependencies before committing","Generate a SARIF report for GitHub Code Scanning to track vulnerabilities alongside other code quality checks","Integrate into a pre-commit hook to prevent commits that introduce known vulnerable packages","Reject packages flagged as malicious or quarantined by using --forbid-quarantined in your build pipeline"],"what_it_does":"PySentry is a command-line vulnerability scanner for Python projects built on a Rust core. It reads your dependency manifest or lock file (supporting formats like uv.lock, poetry.lock, Pipfile.lock, pyproject.toml, requirements.txt, and others), resolves the full dependency tree, and checks every package against three vulnerability databases concurrently. It then reports what is affected, how severe it is, and what upgrade fixes it.\n\nThe tool is designed for CI pipelines and local development. It distinguishes direct from transitive dependencies, flags archived or deprecated packages, and supports multiple output formats (human-readable, JSON, SARIF, Markdown). You can set exit thresholds by severity, forbid known malicious packages, and integrate it into pre-commit hooks or GitHub Actions. It has no runtime Python dependencies and comes with pre-built binaries for common platforms.","worth_installing":"Yes. PySentry is actively maintained, has no runtime dependencies, supports modern Python versions (3.9\u20133.14), and addresses a real security need with a straightforward CLI. The MIT license is permissive. Medium install friction is acceptable given the pre-built wheels and active development. Use it if you want a fast, multi-database vulnerability scanner for Python dependencies."},"id":"pysentry-rs","links":{"html":"https://skillfed.io/packages/pysentry-rs","md":"https://skillfed.io/packages/pysentry-rs.md","pypi":"https://pypi.org/project/pysentry-rs/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-30","license_spdx":null,"license_treatment":"permissive","name":"pysentry-rs","python_support":"supports_current","summary":"Security vulnerability auditing tool for Python packages"},"popularity":{"monthly_downloads":99183,"position":13037,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.4.9"}