mirror of
https://github.com/trustedsec/hate_crack.git
synced 2026-07-28 22:51:14 -07:00
dependabot[bot]andGitHub
9b11809d77
Bumps [ty](https://github.com/astral-sh/ty) from 0.0.63 to 0.0.64. - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ty/compare/0.0.63...0.0.64) --- updated-dependencies: - dependency-name: ty dependency-version: 0.0.64 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
117 lines
2.8 KiB
TOML
117 lines
2.8 KiB
TOML
[build-system]
|
|
requires = ["setuptools>=83.0.0", "setuptools-scm>=8"]
|
|
build-backend = "setuptools.build_meta"
|
|
|
|
[project]
|
|
name = "hate_crack"
|
|
dynamic = ["version"]
|
|
description = "Menu driven Python wrapper for hashcat"
|
|
readme = "README.md"
|
|
requires-python = ">=3.13"
|
|
dependencies = [
|
|
"requests>=2.34.2",
|
|
"beautifulsoup4>=4.15.0",
|
|
"openpyxl>=3.0.0",
|
|
"packaging>=26.2",
|
|
"simple-term-menu==1.6.6",
|
|
"click>=8.4.2",
|
|
"atomic-agents>=2.0.0",
|
|
# Imported directly by hate_crack/llm.py; declared explicitly rather than
|
|
# relying on atomic-agents pulling them in transitively.
|
|
"instructor>=1.14.5",
|
|
"openai>=2.48.0",
|
|
"pydantic>=2.13.4",
|
|
]
|
|
|
|
[project.scripts]
|
|
hate_crack = "hate_crack.__main__:main"
|
|
|
|
[tool.setuptools.packages.find]
|
|
include = ["hate_crack*"]
|
|
|
|
[tool.setuptools.package-data]
|
|
hate_crack = [
|
|
"config.json.example",
|
|
]
|
|
|
|
[tool.setuptools_scm]
|
|
version_scheme = "no-guess-dev"
|
|
local_scheme = "no-local-version"
|
|
|
|
[tool.ruff]
|
|
exclude = [
|
|
"build",
|
|
"dist",
|
|
"PACK",
|
|
"hashcat-utils",
|
|
"omen",
|
|
"princeprocessor",
|
|
"wordlists",
|
|
"rules",
|
|
]
|
|
|
|
[tool.ruff.lint]
|
|
# Pin to the pre-0.16.0 default rule set so future ruff bumps stay
|
|
# behaviour-neutral. Broadening the ruleset is a separate cleanup, not
|
|
# a dep-bump side effect.
|
|
select = ["E4", "E7", "E9", "F"]
|
|
|
|
[tool.bandit]
|
|
# hate_crack shells out to hashcat and its helper binaries extensively, so the
|
|
# scan produces many low-severity subprocess/shlex findings. These are reviewed
|
|
# and captured in .bandit-baseline.json; CI compares against that baseline so
|
|
# only NEW findings fail the build (mirrors the hashview approach). Scan the
|
|
# first-party package only — bundled third-party trees are excluded.
|
|
exclude_dirs = [
|
|
"tests",
|
|
".venv",
|
|
"build",
|
|
"dist",
|
|
"PACK",
|
|
"hashcat-utils",
|
|
"omen",
|
|
"princeprocessor",
|
|
]
|
|
|
|
[tool.ty.src]
|
|
exclude = [
|
|
"build/",
|
|
"dist/",
|
|
"PACK/",
|
|
"wordlists/",
|
|
"HashcatRosetta/",
|
|
"hashcat-utils/",
|
|
"omen/",
|
|
"princeprocessor/",
|
|
]
|
|
|
|
[tool.ty.rules]
|
|
# Module-level globals in main.py are assigned at runtime
|
|
unresolved-reference = "warn"
|
|
# Optional deps (hashcat_rosetta) not always installed
|
|
unresolved-import = "warn"
|
|
# BeautifulSoup union types and module-level globals
|
|
unresolved-attribute = "warn"
|
|
invalid-argument-type = "warn"
|
|
# ty 0.0.63 tightened these to error for the same legacy pattern
|
|
# (module-level `hcatHashFile = None` etc. in main.py, later used as
|
|
# strings). Downgrade to warn to match the rest.
|
|
unsupported-operator = "warn"
|
|
no-matching-overload = "warn"
|
|
invalid-assignment = "warn"
|
|
unresolved-global = "warn"
|
|
|
|
[tool.pytest.ini_options]
|
|
testpaths = [
|
|
"tests",
|
|
]
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"ty==0.0.64",
|
|
"ruff==0.16.0",
|
|
"pytest==9.0.3",
|
|
"pytest-cov==7.1.0",
|
|
"pytest-timeout>=2.4.0",
|
|
]
|