Last updated:
0 purchases
DependencyConfusion 666
DependencyConfusion
Description
This package implements a test for Dependency Confusion using pip.
The version 0.0.2 is available on test.pypi.org.
The version 0.0.2 and 666 are available on pypi.org.
In the scenario you want to install version 0.0.2 available on test.pypi.org and you use the pip --extra-index-url option to install it.
During installation, a window will open to tell you which version is being installed... theoretically version 666 available on pypi.org will be installed if your pip version is vulnerable to dependency confusion.
Requirements
This package require:
python3
python3 Standard Library
Installation
pip install --extra-index-url https://test.pypi.org/simple/ DependencyConfusion
Links
Github Page
Pypi package
Test pypi package
Licence
Licensed under the GPL, version 3.
For personal and professional use. You cannot resell or redistribute these repositories in their original state.
There are no reviews.