I reviewed python-sqlalchemy-utils 0.36.1-0ubuntu2 as checked into groovy.  
This shouldn't be
considered a full audit but rather a quick gauge of maintainability.

python-sqlalchemy-utils is a python package providing additional data
types and utility functions for SQLAlchemy.

- CVE History:
  - No history of CVEs
- No security sensitive Build-Depends
  - debhelper-compat (= 12), dh-python, openstack-pkg-tools, python3-all, 
python3-setuptools, python3-sphinx
- pre/post inst/rm scripts
  - Populated automatically by python debhelper
- No init scripts
- No systemd units
- No dbus services
- No setuid binaries
- No binaries in PATH
- No sudo fragments
- No polkit files
- No udev rules
- unit tests / autopkgtests
  - Unit tests passing, run during build
  - Sizable and organized test suite
  - Autopkgtests minimal, although also passing
- No cron jobs
- Build logs
  - No significant build errors or warnings
  - Some autodoc warnings

- No processes spawned
- Memory management is n/a
- No notable file IO
- No logging
- No environment variable usage
- No use of privileged functions
- No use of cryptography / random number sources
- No use of temp files
- No of networking
- No use of WebKit
- No use of PolicyKit

- No significant cppcheck results
- No significant Coverity results
- No significant shellcheck results
- No significant bandit results

Produced some autodoc tracebacks during build but nothing egregious,
code is well documented and backed by a sizable test suite.

Security team ACK for promoting python-sqlalchemy-utils to main.

** Changed in: python-sqlalchemy-utils (Ubuntu)
     Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1543641

Title:
  [MIR] python-sqlalchemy-utils

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-sqlalchemy-utils/+bug/1543641/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to