repomatic.deps package

Dependency analysis and management.

The dependency graph, policy and source gates, the update report, the vulnerability audit, and the uv lockfile machinery.

Submodules

• repomatic.deps.dep_graph module
  • STYLE_PRIMARY_DEPS_SUBGRAPH
  • STYLE_EXTRA_SUBGRAPH
  • STYLE_GROUP_SUBGRAPH
  • STYLE_PRIMARY_NODE
  • STYLE_DUPLICATE_NODE
  • SubgraphKind
    • SubgraphKind.GROUP
    • SubgraphKind.EXTRA
    • SubgraphKind.flag
    • SubgraphKind.available()
    • SubgraphKind.mermaid_prefix
    • SubgraphKind.style
  • Subgraph
    • Subgraph.kind
    • Subgraph.name
    • Subgraph.owned
    • Subgraph.duplicates
    • Subgraph.mermaid_id
    • Subgraph.title
  • MERMAID_RESERVED_KEYWORDS
  • normalize_package_name()
  • resolve_subgraph_selection()
  • get_cyclonedx_sbom()
  • get_package_names_from_sbom()
  • build_dependency_graph()
  • filter_root_edges()
  • filter_graph_to_package()
  • trim_graph_to_depth()
  • render_mermaid()
  • attribute_subgraph_packages()
  • generate_dependency_graph()
• repomatic.deps.dep_policy module
  • RUNTIME_LOCATION
  • STUB_PREFIX
  • STUB_GROUP
  • UPPER_BOUND_OPERATORS
  • PolicyFinding
    • PolicyFinding.package
    • PolicyFinding.location
    • PolicyFinding.detail
    • PolicyFinding.consequence
    • PolicyFinding.remedy
    • PolicyFinding.message
  • count_comment_words()
  • scan_policy()
• repomatic.deps.dep_report module
  • RELEASE_NOTES_MAX_LENGTH
  • link_name()
  • markdown_section()
  • format_upload_date()
  • format_released()
  • format_eligible()
  • pypi_name_urls()
  • format_exclude_newer_note()
  • format_diff_table()
  • HeldBackPackage
    • HeldBackPackage.name
    • HeldBackPackage.locked_version
    • HeldBackPackage.available_version
    • HeldBackPackage.released
    • HeldBackPackage.eligible
  • EXCLUDE_NEWER_HELD_BACK_NOTE
  • HELD_BACK_COLUMNS
  • build_held_back()
  • format_held_back_table()
  • BYPASS_NEEDS_RELEASE
  • BypassForecast
    • BypassForecast.name
    • BypassForecast.held_version
    • BypassForecast.expires
  • BYPASS_SECTION_NOTE
  • BYPASS_COLUMNS
  • format_bypass_section()
  • fetch_release_notes()
  • format_release_notes()
  • build_comparison_urls()
• repomatic.deps.dep_sources module
  • LINT_DEPS_HEADER_DEFS
  • WHEEL_METADATA_TABLES
  • LOWER_BOUND_OPERATORS
  • PIN_OPERATOR
  • DEV_BOUND_PATTERN
  • TOML_TABLE_HEADER
  • ReleaseSwap
    • ReleaseSwap.name
    • ReleaseSwap.source_key
    • ReleaseSwap.branch
    • ReleaseSwap.floor
    • ReleaseSwap.release
    • ReleaseSwap.released
    • ReleaseSwap.freeze_cutoff
  • tracked_git_overrides()
  • requirement_arrays()
  • parse_requirement()
  • dev_floor()
  • floors_inside_cooldown()
  • find_ready_swaps()
  • strip_dev_bounds()
  • apply_release_swaps()
  • SWAP_SECTION_NOTE
  • format_swap_section()
  • SourceKind
    • SourceKind.DIRECT_REFERENCE
    • SourceKind.GIT
    • SourceKind.INDEX
    • SourceKind.PATH
    • SourceKind.REGISTRY
    • SourceKind.URL
    • SourceKind.WORKSPACE
  • DepFinding
    • DepFinding.package
    • DepFinding.kind
    • DepFinding.location
    • DepFinding.detail
    • DepFinding.consequence
    • DepFinding.remedy
    • DepFinding.level
    • DepFinding.allowed
    • DepFinding.blocking
    • DepFinding.verdict
    • DepFinding.message
  • classify_source()
  • declared_requirements()
  • scan_pyproject()
  • scan_lock()
  • scan_project()
  • BLOCKER_SECTION_NOTE
  • format_blocker_section()
  • declaration_anchor()
  • RELEASE_READY_SENTENCE
  • UNSHIPPABLE_BANNER_LEAD
  • build_release_readiness()
• repomatic.deps.uv module
  • uv_executable()
  • uv_cmd()
  • uvx_cmd()
  • LOCK_TIMESTAMP_SENTINEL
  • load_pyproject_doc()
  • uv_table()
  • resolve_exclude_newer_cutoff()
  • project_exclude_newer()
  • uv_lock_command()
  • packages_outside_cooldown()
  • date_to_utc_cutoff()
  • freeze_cutoff_after()
  • upsert_exclude_newer_packages()
  • add_exclude_newer_packages()
  • freeze_exclude_newer_packages()
  • prune_stale_exclude_newer_packages()
  • LockFile
    • LockFile.versions
    • LockFile.upload_times
    • LockFile.exclude_newer
    • LockFile.cooldown_span
    • LockFile.load()
  • parse_lock_versions()
  • parse_lock_upload_times()
  • load_lock_data()
  • EXTRA_MARKER_RE
  • LockSpecifiers
    • LockSpecifiers.by_package
    • LockSpecifiers.by_subgraph
    • LockSpecifiers.by_main
  • parse_lock_specifiers()
  • diff_lock_versions()
  • compute_held_back_packages()
  • compute_bypass_forecasts()
  • compute_pruned_forecasts()
  • SyncResult
    • SyncResult.changes
    • SyncResult.upload_times
    • SyncResult.exclude_newer
    • SyncResult.reverted
    • SyncResult.pruned_bypasses
    • SyncResult.frozen_bypasses
    • SyncResult.bypass_forecasts
  • sync_uv_lock()
• repomatic.deps.vulnerable_deps module
  • AUDIT_HEADER_DEFS
  • MIN_UV_AUDIT_JSON_VERSION
  • AdvisorySource
    • AdvisorySource.UV_AUDIT
    • AdvisorySource.GITHUB_ADVISORIES
  • VulnerablePackage
    • VulnerablePackage.name
    • VulnerablePackage.current_version
    • VulnerablePackage.advisory_id
    • VulnerablePackage.advisory_title
    • VulnerablePackage.fixed_version
    • VulnerablePackage.advisory_url
    • VulnerablePackage.aliases
    • VulnerablePackage.sources
    • VulnerablePackage.source_urls
  • parse_uv_audit_json()
  • format_vulnerability_table()
  • collect_vulnerable_packages()
  • fix_vulnerable_deps()
  • fetch_dependabot_alerts()