Packages
Validates pyproject.toml files against JSON Schema definitions to ensure compliance with Python packaging standards and PEPs.
A flake8 plugin that flags type annotations exceeding configurable complexity thresholds, measuring nesting depth and element count to encourage simpler, more readable type hints.
Install it if your team values readable, maintainable type hints.
A pytest plugin that repeats tests a fixed number of times or for a specified duration, useful for detecting intermittent failures and stress-testing.
A command-line scanner that integrates Python projects with SonarQube or SonarCloud for code quality analysis, supporting configuration via CLI arguments, environment variables, or pyproject.toml.
A flake8 plugin that enforces strict, opinionated Python code style rules to detect complexity, bugs, and violations beyond standard linting, complementing tools like ruff and mypy.
Install it if your team values strict code consistency and wants to catch complexity and bugs beyond what ruff or mypy provide.
Defines and enforces policy rules on cloud resources during Pulumi deployments, with support for advisory warnings, mandatory errors, and automatic remediation.
Integrates ruff's linting, formatting, and code-action capabilities into python-lsp-server, allowing LSP clients to use ruff as the primary linter and formatter alongside other pylsp features.
Install it if you use python-lsp-server and want ruff's linting and formatting capabilities available in your editor; skip it only if you prefer ruff's standalone LSP…
Provides a framework for writing and running upgrade checks in OpenStack projects, allowing operators to validate system readiness before performing version upgrades.
A flake8 plugin that enforces trailing comma placement in Python code to reduce merge conflicts in multi-line dictionaries, lists, and function calls.
However, note that maintenance is aging (last release 820 days ago); if you need active support or compatibility with very recent Python/flake8 versions, consider…
A flake8 plugin that enforces consistent styling of string literals, including quote choice, raw string usage, and docstring formatting.
However, the 412-day gap since the last release and aging maintenance status suggest limited active development—consider whether the current feature set meets your…
Separates music into individual stems (vocals, drums, bass, other instruments) using pre-trained deep learning models, with optional speech enhancement.
However, dormancy (850 days since last release) means no active maintenance or bug fixes; consider it if your use case matches the pre-trained models and you do not…
Modifies a Selenium Chrome WebDriver to evade bot-detection mechanisms by injecting JavaScript that masks automation signals.
A flake8 extension that checks Python code for cognitive complexity, flagging functions that exceed a configurable threshold (default 7) to help identify overly complex logic.
Dataframely validates the schema and content of Polars data frames using declarative class-based schemas with field constraints and custom validation rules.
However, verify the license before use in proprietary work, and be aware that the package is relatively new (first release March 2025)—test it in non-critical…
Scans AI Agent Skills for prompt injection, data exfiltration, and malicious code using pattern-based detection, LLM analysis, and behavioral dataflow inspection.
However, do not rely on it as your sole security control: the documentation explicitly warns that clean scans do not guarantee safety, and human code review remains…
Enforces Python type annotations at runtime using decorators, validating function inputs, outputs, and nested generic types without requiring a compiler or external dependencies.
A flake8 plugin that detects and reports redundant parentheses, brackets, and braces, plus enforces alignment rules for these delimiters.
Install it if your codebase would benefit from stricter parenthesis hygiene; disable the alignment checker (PAR1) if you find it too opinionated.
Parses and validates Glean telemetry configuration files (metrics.yaml and pings.yaml), generating code for various SDK integrations and performing linting checks.
However, verify the license terms first, as the metadata does not clearly record the license under which it is distributed.
Provides PEP-484 type stubs for django-filter to enable static type checking with mypy and other type checkers.
Automatically formats .ini and .cfg configuration files with consistent indentation, spacing, and value assignment syntax while preserving comments.
A pytest plugin that discovers and runs C++ tests from Google Test, Boost.Test, and Catch2 frameworks using pytest's test runner and reporting infrastructure.
AppiumLibrary is a Robot Framework library that enables automated testing of mobile applications on Android and iOS devices by bridging Robot Framework's keyword-driven syntax with Appium's mobile automation capabilities.
Robotidy autoformats Robot Framework test code, normalizing spacing, alignment, and structure to match a consistent style.
However, be aware of the deprecation notice: if you are starting a new project or can migrate, Robocop 6.0+ is the recommended path forward.
Atheris is a coverage-guided fuzzer for Python code and native CPython extensions, using libFuzzer to generate and mutate test inputs that maximize code coverage and expose bugs.
Molotov is a load testing tool that uses asyncio and aiohttp to write and run performance tests against HTTP services.
A pytest plugin that generates Excel reports from test execution results, capturing test outcomes and metadata into .xls files with optional verbose formatting.
Install it if your workflow or stakeholders require test results in spreadsheet form; skip it if terminal or JSON reporting suffices.
Integrates aXe accessibility testing with Selenium to automate web accessibility scanning and report violations found on web pages.
A flake8 plugin that detects and flags temporary developer notes like FIXME, TODO, and XXX comments in Python code, allowing you to enforce policies on which temporary markers can be committed.
However, be aware the project is abandoned—it will not receive updates for new flake8 versions, so verify compatibility with your current flake8 version before…
HOL Guard is a local-first antivirus and runtime protection layer for AI agents that evaluates agent actions, tool calls, package installs, and MCP servers for secrets exposure, prompt injection, unsafe commands, and malicious packages before they execute.
Install it if you run AI agents on your machine and want runtime visibility and control over their actions.
Wraps Faker's random test data generation as Robot Framework keywords, letting you generate realistic fake data directly in Robot Framework test cases without static test data.
EMRValidator is a data validation library specialized for healthcare datasets, offering built-in validators for medical record numbers, ICD codes, and other clinical data formats alongside general data quality checks.
However, note the aging maintenance status (200 days since last release) and verify Python version support before committing to production use.
Zuban is a Rust-based Python language server and type checker offering Mypy-compatible and PyRight-like checking modes, with LSP support for diagnostics, completions, goto, references, rename, hover, and document highlights.
A Flake8 plugin that detects and reports mismatches between Python file executable permissions and shebang lines, catching five specific permission and shebang errors.
Install it if your team or project cares about consistent script permissions; skip it if you don't distribute or run Python files as executables.
Provides standalone version comparison and parsing for PEP 386 and PEP 440 version schemes without requiring the full packaging library or deprecated distutils.
Extracts and formats stack traces from minidump files generated by crashed processes, primarily for Firefox and Mozilla testing workflows.
However, the dormant maintenance status means you should verify that it works with your Python version and that the underlying stackwalk binary is available in your…
A flake8 plugin that validates Python docstrings as reStructuredText markup, catching RST syntax errors and formatting issues in docstring content.
Install it if your project uses reStructuredText docstrings and you want to catch markup errors early.
A Pylint plugin that adds Odoo-specific code quality checks to enforce Odoo development conventions and best practices.
The AGPLv3+ license requires careful review if you plan to distribute proprietary modifications, but using it as a development tool carries no restrictions.
Installs a .pth file that automatically enables coverage.py's subprocess tracking in your Python environment, allowing coverage measurement across spawned processes without manual instrumentation.
Converts pylint JSON reports into formatted HTML documents, optionally using custom Jinja2 templates and supporting both standard and extended pylint JSON formats.
However, maintenance is dormant (last update 2023-11-11), so verify compatibility with your current pylint and Python versions before relying on it in production.
Socket Security CLI scans Python projects for supply-chain security risks, generates SARIF reports, and integrates with CI/CD pipelines to enforce security policies.