{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/3"}],"enrichment":{"capability":"A command-line scanner that integrates Python projects with SonarQube or SonarCloud for code quality analysis, supporting configuration via CLI arguments, environment variables, or pyproject.toml.","skillfed_tags":["code-quality","ci-cd","static-analysis"],"use_cases":["Integrate code quality gates into CI/CD pipelines by running pysonar as a build step before deployment.","Analyze Python projects locally during development using pyproject.toml configuration without installing SonarScanner separately.","Enforce organization-wide code standards by configuring sonar-project.properties and running scans across multiple repositories.","Monitor code quality trends over time by submitting analysis results to SonarCloud for public or private projects.","Combine with environment variables in containerized workflows to pass credentials and server URLs without hardcoding them."],"what_it_does":"pysonar is a Python wrapper around SonarQube's scanning infrastructure, designed to let developers run code quality analysis directly from the command line without needing the standalone SonarScanner binary. It reads your project configuration from multiple sources\u2014CLI flags, environment variables, pyproject.toml, or a sonar-project.properties file\u2014and communicates with a running SonarQube instance or SonarCloud to perform static analysis on your codebase.\n\nThe package depends on jproperties, requests, and tomli to parse configuration files, make HTTP calls to the Sonar server, and handle TOML parsing. It targets modern Python versions (3.10+) and is actively maintained by SonarSource. Configuration is flexible and can be layered across multiple sources with clear precedence rules, making it adaptable to both local development workflows and CI/CD pipelines.","worth_installing":"Yes, if you are already using SonarQube or SonarCloud and want a lightweight Python-native scanner. The low install friction, active maintenance, and flexible configuration make it a practical choice for Python projects. The copyleft license (LGPL-3.0-only) requires review in proprietary contexts but poses no barrier for internal or open-source use. No known vulnerabilities as of 2026-08-14."},"id":"pysonar","links":{"html":"https://skillfed.io/packages/pysonar","md":"https://skillfed.io/packages/pysonar.md","pypi":"https://pypi.org/project/pysonar/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-08","license_spdx":"LGPL-3.0-only","license_treatment":"copyleft","name":"pysonar","python_support":"supports_current","summary":"Sonar Scanner for the Python Ecosystem"},"popularity":{"monthly_downloads":321349,"position":7624,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.7.0.5143"}