macOS
Homebrewverified · 100%
brew install banditlocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install banditMacPorts ports tree · python/bandit/Portfile · source: api.github.com
安装
使用 Automic Vault 安装
Automic Vault
sudo av install brew:banditLinux
Debian aptverified · 92%
sudo apt install banditDebian stable package indexes · bandit · source: deb.debian.org
Nixverified · 92%
nix profile install nixpkgs#banditnixpkgs package indexes · bandit · source: raw.githubusercontent.com
Arch Linux pacmanverified · 92%
sudo pacman -S banditArch Linux sync databases · bandit · source: geo.mirror.pkgbuild.com
软件包管理器来源
平台说明
- 没有特定于此软件包的平台说明。
概览
软件包摘要
Security-oriented static analyser for Python code
主页
命令和别名
- bandit
- bandit-baseline
- bandit-config-generator
安全态势
风险级别：green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Installs with 2 runtime dependencies.
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
bandit | cli | global executable | |
bandit-baseline | cli | global executable | |
bandit-config-generator | cli | global executable |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-06-10
管理器版本1.9.4
管理器更新时间2026-03-30
本地数据ok
上游not checked
检测到的最新版本not detected
https://github.com/PyCQA/bandit
- infoNo cached GitHub release or tag data was available.https://github.com/PyCQA/banditnone confidence
安装元数据
软件包元数据
| Package key | brew:bandit |
|---|---|
| Version | 1.9.4 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/bandit |
| Homepage | https://github.com/PyCQA/bandit |
| Repository | https://github.com/PyCQA/bandit |
| Upstream docs | https://bandit.readthedocs.io/en/latest |
| License | Apache-2.0 |
| Source archive | https://files.pythonhosted.org/packages/aa/c3/0cb80dfe0f3076e5da7e4c5ad8e57bac6ac357ff4a6406205501cade4965/bandit-1.9.4.tar.gz |
| Last updated | 2026-03-30T09:15:24Z |
| Pulse | updated |
| Dependencies | libyaml, python@3.14 |
| Bottle | available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | bandit |
| Version Scheme | 0 |
| Revision | 1 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
bandit 1.7.10-2
Security oriented static analyzer for Python code - Metapackage
https://github.com/PyCQA/bandit
sudo apt install bandit- Section: python
- Architecture: all
- 1 dependencies
- normalized package name match
- Matched by: Bandit
Debian apt95%
python3-bandit 1.7.10-2
Security oriented static analyzer for Python code - Python 3.x
https://github.com/PyCQA/bandit
sudo apt install python3-bandit- Section: python
- Architecture: all
- Source Package: bandit
- 7 dependencies
- normalized package name match
- Matched by: Bandit
Nix95%
bandit
nix profile install nixpkgs#bandit- normalized package name match
- Matched by: Bandit
Ubuntu apt95%
bandit 1.6.2-3
Security oriented static analyzer for Python code - Metapackage
https://github.com/PyCQA/bandit
sudo apt install bandit- Section: universe/python
- Architecture: all
- 1 dependencies
- normalized package name match
- Matched by: Bandit
Ubuntu apt95%
python3-bandit 1.6.2-3
Security oriented static analyzer for Python code - Python 3.x
https://github.com/PyCQA/bandit
sudo apt install python3-bandit- Section: universe/python
- Architecture: all
- Source Package: bandit
- 5 dependencies
- normalized package name match
- Matched by: Bandit
pacman95%
bandit 1.9.4-1
Python security linter from OpenStack Security
https://github.com/PyCQA/bandit
sudo pacman -S bandit- License: Apache-2.0
- Architecture: any
- 4 dependencies
- normalized package name match
- Matched by: Bandit
MacPorts95%
bandit
sudo port install bandit- normalized package name match
- Matched by: Bandit
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment