pyproject.toml

[project]
name = "it-depends"
dynamic = ["version"]
description = "A software dependency analyzer"
readme = "README.md"
license-files = ["LICENSE"]
license = "LGPL-3.0-or-later"

authors = [{ name = "Trail of Bits", email = "opensource@trailofbits.com" }]

classifiers = [
    "Programming Language :: Python :: 3",
]
dependencies = [
    "cyclonedx-python-lib >= 5,< 12",
    "docker >= 7.1.0",
    "graphviz >= 0.21",
    "johnnydep >= 1.20.6",
    "networkx >= 3.4.2",
    "parse_cmake >= 0.4.1",
    "platformdirs >= 4.4.0",
    "pydantic-settings >= 2.7.1,< 2.14.0",
    "semantic_version >= 2.10.0",
    "sqlalchemy >= 2.0.43",
    "tqdm >= 4.67.1",
]
requires-python = ">=3.10"

[tool.setuptools.dynamic]
version = { attr = "it_depends.__version__" }

[project.optional-dependencies]
doc = ["pdoc"]
test = ["pytest", "pytest-cov", "pytest-timeout", "pretend", "coverage[toml]"]
lint = [
    "ruff>=0.14.9,<1.0",
    "mypy>=1.19.1,<2.0",
    "types-html5lib",
    "types-requests",
    "types-toml",
    "interrogate",
]
dev = ["it-depends[doc,test,lint]", "twine", "build"]

[project.scripts]
"it-depends" = "it_depends._cli:main"

[project.urls]
Homepage = "https://pypi.org/project/it-depends"
Documentation = "https://trailofbits.github.io/it-depends/"
Issues = "https://github.com/trailofbits/it-depends/issues"
Source = "https://github.com/trailofbits/it-depends"

[tool.pytest.ini_options]
norecursedirs = ["test/repos"]

[tool.coverage.run]
# don't attempt code coverage for the CLI entrypoints or logging configuration
omit = ["src/it_depends/_cli.py", "src/it_depends/logger.py", "src/it_depends/config.py"]

[tool.mypy]
mypy_path = "src"
packages = "it_depends"
allow_redefinition = true
check_untyped_defs = true
disallow_incomplete_defs = true
disallow_untyped_defs = true
ignore_missing_imports = true
no_implicit_optional = true
show_error_codes = true
sqlite_cache = true
strict_equality = true
warn_no_return = true
warn_redundant_casts = true
warn_return_any = true
warn_unreachable = false
warn_unused_configs = true
warn_unused_ignores = true

[tool.ruff]
line-length = 120
include = ["src/**/*.py", "test/**/*.py"]

[tool.ruff.lint]
select = ["ALL"]
# D203 and D213 are incompatible with D211 and D212 respectively.
# COM812 and ISC001 can cause conflicts when using ruff as a formatter.
# See https://docs.astral.sh/ruff/formatter/#conflicting-lint-rules.
# S603 fires on any subprocess call with a list argument. All subprocess calls in this
# project use validated executables (resolved via shutil.which) with controlled arguments.
ignore = ["D203", "D213", "COM812", "ISC001", "S603"]

[tool.ruff.lint.per-file-ignores]
"src/it_depends/_cli.py" = [
    "T201", # allow `print` in cli module
]
"test/**/*.py" = [
    "D",    # no docstrings in tests
    "S101", # asserts are expected in tests
]

[tool.interrogate]
# don't enforce documentation coverage for packaging, testing, the virtual
# environment, or the CLI (which is documented separately).
exclude = ["env", "test", "src/it_depends/_cli.py", "test/repos"]
ignore-semiprivate = true
fail-under = 95