{"action":"created","issue":{"url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/207","labels_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/207/labels{/name}","comments_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/207/comments","events_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/207/events","html_url":"https://github.com/jeremylong/DependencyCheck/issues/207","id":65721135,"number":207,"title":"Add Python Analyzer","user":{"login":"dwvisser","id":490575,"avatar_url":"https://avatars.githubusercontent.com/u/490575?v=3","gravatar_id":"","url":"https://api.github.com/users/dwvisser","html_url":"https://github.com/dwvisser","followers_url":"https://api.github.com/users/dwvisser/followers","following_url":"https://api.github.com/users/dwvisser/following{/other_user}","gists_url":"https://api.github.com/users/dwvisser/gists{/gist_id}","starred_url":"https://api.github.com/users/dwvisser/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dwvisser/subscriptions","organizations_url":"https://api.github.com/users/dwvisser/orgs","repos_url":"https://api.github.com/users/dwvisser/repos","events_url":"https://api.github.com/users/dwvisser/events{/privacy}","received_events_url":"https://api.github.com/users/dwvisser/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-04-01T16:13:12Z","updated_at":"2015-04-26T12:15:23Z","closed_at":"2015-04-26T12:15:23Z","body":"Analyzer should gather evidence from the various downloadable artifacts from the [Cheese Shop](https://pypi.python.org/pypi):\r\n\r\n* Eggs: .egg and .zip extensions\r\n* Wheels: .whl extension\r\n* Sdists: .tar.gz extension\r\n\r\nAlso gather evidence from a Python installation's site-packages (e.g., a system's installed packages, or a virtualenv's installed packages):\r\n\r\n* .dist-info/MANIFEST\r\n* .egg-info/PKG-INFO\r\n* .egg/EGG-INFO/PKG-INFO\r\n* actual Python package folders\r\n\r\nI already have a prototype successfully parsing out MANIFEST files and PKG-INFO files from the file system and .whl archives. I need to finish that part, and add scanning of the actual Python packages (in file system and sdists).\r\n\r\nP2exe- and Py2app-deployed code (i.e., compiled) is out of scope for this issue tracker. Certain kinds of applications that embed the Python interpreter may by scannable though."},"comment":{"url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/comments/96371958","html_url":"https://github.com/jeremylong/DependencyCheck/issues/207#issuecomment-96371958","issue_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/207","id":96371958,"user":{"login":"jeremylong","id":862914,"avatar_url":"https://avatars.githubusercontent.com/u/862914?v=3","gravatar_id":"","url":"https://api.github.com/users/jeremylong","html_url":"https://github.com/jeremylong","followers_url":"https://api.github.com/users/jeremylong/followers","following_url":"https://api.github.com/users/jeremylong/following{/other_user}","gists_url":"https://api.github.com/users/jeremylong/gists{/gist_id}","starred_url":"https://api.github.com/users/jeremylong/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeremylong/subscriptions","organizations_url":"https://api.github.com/users/jeremylong/orgs","repos_url":"https://api.github.com/users/jeremylong/repos","events_url":"https://api.github.com/users/jeremylong/events{/privacy}","received_events_url":"https://api.github.com/users/jeremylong/received_events","type":"User","site_admin":false},"created_at":"2015-04-26T12:15:23Z","updated_at":"2015-04-26T12:15:23Z","body":"see pull #217 "}}