[{"data":1,"prerenderedAt":3191},["ShallowReactive",2],{"page-\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fauditing-dependencies-with-pip-audit\u002F":3,"content-directory":2347},{"id":4,"title":5,"body":6,"date":2333,"description":2334,"difficulty":2335,"draft":2336,"extension":2337,"meta":2338,"navigation":288,"path":2339,"seo":2340,"stem":2341,"tags":2342,"updated":2333,"__hash__":2346},"content\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fauditing-dependencies-with-pip-audit\u002Findex.md","Auditing a Python CLI’s Dependencies with pip-audit",{"type":7,"value":8,"toc":2315},"minimark",[9,24,29,63,67,72,129,133,154,157,165,168,172,184,412,421,425,432,487,493,1439,1442,1445,1449,1452,1480,1506,1513,1516,1520,1523,1563,1567,1570,2172,2190,2194,2216,2220,2229,2235,2239,2250,2254,2270,2274,2277,2281,2311],[10,11,12,13,17,18,23],"p",{},"Most security problems in a Python CLI are not in its own code. They are published advisories against one of the dozens of packages it depends on, transitively — an XML parser that expands entities, a template engine with a sandbox escape, an HTTP library that leaks headers on redirect. The fix usually exists by the time anyone notices; the problem is noticing. ",[14,15,16],"code",{},"pip-audit",", maintained by the Python Packaging Authority, compares a set of packages against the Python Packaging Advisory Database and OSV and reports every known vulnerability with the versions that fix it. This guide runs it against exactly what your CLI ships — the lock file — wires it into CI on pull requests and on a schedule, and adds the piece that makes it sustainable: a triage allowlist where every exception has a reason and an expiry date. It belongs to the ",[19,20,22],"a",{"href":21},"\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002F","supply-chain security topic",".",[25,26,28],"h2",{"id":27},"prerequisites","Prerequisites",[30,31,32,43,56],"ul",{},[33,34,35,36,39,40,23],"li",{},"A CLI project managed with uv (",[14,37,38],{},"uv.lock",") — Poetry works the same way with ",[14,41,42],{},"poetry export",[33,44,45,48,49,51,52,55],{},[14,46,47],{},"uvx"," to run ",[14,50,16],{}," without adding it to the project; Python 3.11+ for ",[14,53,54],{},"tomllib"," in the triage script.",[33,57,58,59,23],{},"A CI system; the examples use GitHub Actions, as in ",[19,60,62],{"href":61},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Ftesting-a-cli-across-python-versions-with-github-actions\u002F","testing a CLI across Python versions with GitHub Actions",[25,64,66],{"id":65},"audit-what-you-ship-not-what-is-installed","Audit what you ship, not what is installed",[10,68,69,71],{},[14,70,16],{}," with no arguments audits the current environment — whatever happens to be installed in the virtual environment you run it from, including developer tools and stale packages. That is rarely the question you care about. Export the lock file to a requirements file and audit that instead:",[73,74,79],"pre",{"className":75,"code":76,"language":77,"meta":78,"style":78},"language-bash shiki shiki-themes github-light github-dark","uv export --frozen --no-emit-project --format requirements.txt -o requirements.txt\nuvx pip-audit -r requirements.txt --disable-pip\n","bash","",[14,80,81,113],{"__ignoreMap":78},[82,83,86,90,94,98,101,104,107,110],"span",{"class":84,"line":85},"line",1,[82,87,89],{"class":88},"sScJk","uv",[82,91,93],{"class":92},"sZZnC"," export",[82,95,97],{"class":96},"sj4cs"," --frozen",[82,99,100],{"class":96}," --no-emit-project",[82,102,103],{"class":96}," --format",[82,105,106],{"class":92}," requirements.txt",[82,108,109],{"class":96}," -o",[82,111,112],{"class":92}," requirements.txt\n",[82,114,116,118,121,124,126],{"class":84,"line":115},2,[82,117,47],{"class":88},[82,119,120],{"class":92}," pip-audit",[82,122,123],{"class":96}," -r",[82,125,106],{"class":92},[82,127,128],{"class":96}," --disable-pip\n",[130,131],"inline-diagram",{"name":132},"audit-what",[10,134,135,138,139,142,143,146,147,149,150,153],{},[14,136,137],{},"--frozen"," refuses to touch the lock file, so the audit sees exactly what CI and your release build install. ",[14,140,141],{},"--no-emit-project"," leaves out your own package, which is not on the advisory databases. ",[14,144,145],{},"--disable-pip"," tells ",[14,148,16],{}," not to resolve anything — the exported file is already fully pinned and hashed, so it simply looks up each pinned version. Add ",[14,151,152],{},"--no-dev"," to the export to audit only runtime dependencies, which is what users get; keep development dependencies in a separate, lower-priority audit if you want to know about them too.",[10,155,156],{},"The output lists each vulnerable package, the advisory ID and the fixed versions:",[73,158,163],{"className":159,"code":161,"language":162,"meta":78},[160],"language-text","Found 4 known vulnerabilities in 1 package\nName   Version ID              Fix Versions\n------ ------- --------------- ------------\njinja2 3.1.2   PYSEC-2026-1473 3.1.3\njinja2 3.1.2   PYSEC-2026-1474 3.1.4\n","text",[14,164,161],{"__ignoreMap":78},[10,166,167],{},"The exit code is 1 when anything is found and 0 otherwise, which is all a CI gate needs.",[25,169,171],{"id":170},"running-it-in-ci","Running it in CI",[10,173,174,175,179,180,183],{},"Two triggers cover the important cases. On ",[176,177,178],"strong",{},"pull requests that change dependencies",", an audit stops a vulnerable version from being introduced. On a ",[176,181,182],{},"schedule",", an audit catches new advisories against versions you already ship — the more common case, since advisories are published long after releases.",[73,185,189],{"className":186,"code":187,"language":188,"meta":78,"style":78},"language-yaml shiki shiki-themes github-light github-dark","# .github\u002Fworkflows\u002Faudit.yml\nname: audit\non:\n  pull_request:\n    paths: [\"pyproject.toml\", \"uv.lock\", \"audit-allowlist.toml\"]\n  schedule:\n    - cron: \"23 5 * * *\"\n  workflow_dispatch:\n\npermissions:\n  contents: read\n\njobs:\n  pip-audit:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - uses: astral-sh\u002Fsetup-uv@v6\n      - run: uv export --frozen --no-dev --no-emit-project --format requirements.txt -o requirements.txt\n      - run: uvx pip-audit -r requirements.txt --disable-pip -f json -o audit.json || true\n      - run: uv run --no-project python scripts\u002Ftriage_audit.py audit.json audit-allowlist.toml\n","yaml",[14,190,191,197,210,219,227,253,261,275,283,290,298,309,314,322,330,341,349,363,375,388,400],{"__ignoreMap":78},[82,192,193],{"class":84,"line":85},[82,194,196],{"class":195},"sJ8bj","# .github\u002Fworkflows\u002Faudit.yml\n",[82,198,199,203,207],{"class":84,"line":115},[82,200,202],{"class":201},"s9eBZ","name",[82,204,206],{"class":205},"sVt8B",": ",[82,208,209],{"class":92},"audit\n",[82,211,213,216],{"class":84,"line":212},3,[82,214,215],{"class":96},"on",[82,217,218],{"class":205},":\n",[82,220,222,225],{"class":84,"line":221},4,[82,223,224],{"class":201},"  pull_request",[82,226,218],{"class":205},[82,228,230,233,236,239,242,245,247,250],{"class":84,"line":229},5,[82,231,232],{"class":201},"    paths",[82,234,235],{"class":205},": [",[82,237,238],{"class":92},"\"pyproject.toml\"",[82,240,241],{"class":205},", ",[82,243,244],{"class":92},"\"uv.lock\"",[82,246,241],{"class":205},[82,248,249],{"class":92},"\"audit-allowlist.toml\"",[82,251,252],{"class":205},"]\n",[82,254,256,259],{"class":84,"line":255},6,[82,257,258],{"class":201},"  schedule",[82,260,218],{"class":205},[82,262,264,267,270,272],{"class":84,"line":263},7,[82,265,266],{"class":205},"    - ",[82,268,269],{"class":201},"cron",[82,271,206],{"class":205},[82,273,274],{"class":92},"\"23 5 * * *\"\n",[82,276,278,281],{"class":84,"line":277},8,[82,279,280],{"class":201},"  workflow_dispatch",[82,282,218],{"class":205},[82,284,286],{"class":84,"line":285},9,[82,287,289],{"emptyLinePlaceholder":288},true,"\n",[82,291,293,296],{"class":84,"line":292},10,[82,294,295],{"class":201},"permissions",[82,297,218],{"class":205},[82,299,301,304,306],{"class":84,"line":300},11,[82,302,303],{"class":201},"  contents",[82,305,206],{"class":205},[82,307,308],{"class":92},"read\n",[82,310,312],{"class":84,"line":311},12,[82,313,289],{"emptyLinePlaceholder":288},[82,315,317,320],{"class":84,"line":316},13,[82,318,319],{"class":201},"jobs",[82,321,218],{"class":205},[82,323,325,328],{"class":84,"line":324},14,[82,326,327],{"class":201},"  pip-audit",[82,329,218],{"class":205},[82,331,333,336,338],{"class":84,"line":332},15,[82,334,335],{"class":201},"    runs-on",[82,337,206],{"class":205},[82,339,340],{"class":92},"ubuntu-latest\n",[82,342,344,347],{"class":84,"line":343},16,[82,345,346],{"class":201},"    steps",[82,348,218],{"class":205},[82,350,352,355,358,360],{"class":84,"line":351},17,[82,353,354],{"class":205},"      - ",[82,356,357],{"class":201},"uses",[82,359,206],{"class":205},[82,361,362],{"class":92},"actions\u002Fcheckout@v4\n",[82,364,366,368,370,372],{"class":84,"line":365},18,[82,367,354],{"class":205},[82,369,357],{"class":201},[82,371,206],{"class":205},[82,373,374],{"class":92},"astral-sh\u002Fsetup-uv@v6\n",[82,376,378,380,383,385],{"class":84,"line":377},19,[82,379,354],{"class":205},[82,381,382],{"class":201},"run",[82,384,206],{"class":205},[82,386,387],{"class":92},"uv export --frozen --no-dev --no-emit-project --format requirements.txt -o requirements.txt\n",[82,389,391,393,395,397],{"class":84,"line":390},20,[82,392,354],{"class":205},[82,394,382],{"class":201},[82,396,206],{"class":205},[82,398,399],{"class":92},"uvx pip-audit -r requirements.txt --disable-pip -f json -o audit.json || true\n",[82,401,403,405,407,409],{"class":84,"line":402},21,[82,404,354],{"class":205},[82,406,382],{"class":201},[82,408,206],{"class":205},[82,410,411],{"class":92},"uv run --no-project python scripts\u002Ftriage_audit.py audit.json audit-allowlist.toml\n",[10,413,414,416,417,420],{},[14,415,16],{}," writes JSON and is allowed to \"fail\" here because the decision moves to the triage script in the last step. (Pin the actions to commit SHAs in your real workflow, as the ",[19,418,419],{"href":21},"topic overview"," explains.) A failing scheduled run should notify someone — GitHub emails the workflow's last editor by default, which is easy to miss; routing failures to a team channel is better.",[25,422,424],{"id":423},"triage-with-expiring-exceptions","Triage with expiring exceptions",[10,426,427,428,431],{},"Not every advisory affects your CLI. A vulnerability in a library's server component does not matter to a client that never starts a server. ",[14,429,430],{},"pip-audit --ignore-vuln ID"," exists for this, but a list of ignored IDs in a workflow file quietly becomes permanent. An allowlist file that requires a reason and an expiry date keeps exceptions honest:",[73,433,437],{"className":434,"code":435,"language":436,"meta":78,"style":78},"language-toml shiki shiki-themes github-light github-dark","# audit-allowlist.toml\n[[ignore]]\nid = \"GHSA-h5c8-rqwp-cp95\"\npackage = \"jinja2\"\nreason = \"Only affects xmlattr filter with user-controlled keys; we never use xmlattr.\"\nexpires = 2026-12-31\n","toml",[14,438,439,444,455,463,471,479],{"__ignoreMap":78},[82,440,441],{"class":84,"line":85},[82,442,443],{"class":195},"# audit-allowlist.toml\n",[82,445,446,449,452],{"class":84,"line":115},[82,447,448],{"class":205},"[[",[82,450,451],{"class":88},"ignore",[82,453,454],{"class":205},"]]\n",[82,456,457,460],{"class":84,"line":212},[82,458,459],{"class":205},"id = ",[82,461,462],{"class":92},"\"GHSA-h5c8-rqwp-cp95\"\n",[82,464,465,468],{"class":84,"line":221},[82,466,467],{"class":205},"package = ",[82,469,470],{"class":92},"\"jinja2\"\n",[82,472,473,476],{"class":84,"line":229},[82,474,475],{"class":205},"reason = ",[82,477,478],{"class":92},"\"Only affects xmlattr filter with user-controlled keys; we never use xmlattr.\"\n",[82,480,481,484],{"class":84,"line":255},[82,482,483],{"class":205},"expires = ",[82,485,486],{"class":96},"2026-12-31\n",[10,488,489,490,492],{},"The triage script reads ",[14,491,16],{},"'s JSON, removes allowed findings — matching the advisory's ID or any of its aliases, since databases use different identifiers for the same issue — and fails on anything left, or on any exception that has expired:",[73,494,498],{"className":495,"code":496,"language":497,"meta":78,"style":78},"language-python shiki shiki-themes github-light github-dark","# scripts\u002Ftriage_audit.py\nfrom __future__ import annotations\n\nimport json\nimport sys\nimport tomllib\nfrom dataclasses import dataclass\nfrom datetime import date\nfrom pathlib import Path\n\n\n@dataclass(frozen=True)\nclass Finding:\n    package: str\n    version: str\n    id: str\n    aliases: tuple[str, ...]\n    fixes: tuple[str, ...]\n\n\ndef findings(report: dict) -> list[Finding]:\n    seen: dict[tuple[str, str], Finding] = {}\n    for dep in report.get(\"dependencies\", []):\n        for v in dep.get(\"vulns\", []):\n            f = Finding(dep[\"name\"], dep[\"version\"], v[\"id\"], tuple(v.get(\"aliases\", [])),\n                        tuple(v.get(\"fix_versions\", [])))\n            seen[(f.package, f.id)] = f              # pip-audit can list duplicates\n    return list(seen.values())\n\n\ndef evaluate(report: dict, allowlist: dict, today: date) -> tuple[list[Finding], list[str]]:\n    \"\"\"Return (unhandled findings, problems with the allowlist).\"\"\"\n    problems, allowed = [], set()\n    for entry in allowlist.get(\"ignore\", []):\n        if not entry.get(\"reason\"):\n            problems.append(f\"{entry.get('id')}: an exception needs a reason\")\n        elif entry.get(\"expires\") is None or entry[\"expires\"] \u003C today:\n            problems.append(f\"{entry['id']}: exception expired on {entry.get('expires')}\")\n        else:\n            allowed.add(entry[\"id\"])\n    open_findings = [f for f in findings(report)\n                     if f.id not in allowed and not allowed.intersection(f.aliases)]\n    return open_findings, problems\n\n\ndef main(argv: list[str]) -> int:\n    report = json.loads(Path(argv[0]).read_text())\n    allow_path = Path(argv[1])\n    allowlist = tomllib.loads(allow_path.read_text()) if allow_path.exists() else {}\n    open_findings, problems = evaluate(report, allowlist, date.today())\n    for f in open_findings:\n        fix = \", \".join(f.fixes) or \"no fix yet\"\n        print(f\"VULNERABLE {f.package} {f.version}: {f.id} ({', '.join(f.aliases)}) -> {fix}\")\n    for p in problems:\n        print(f\"ALLOWLIST {p}\")\n    if not open_findings and not problems:\n        print(\"audit clean\")\n    return 1 if open_findings or problems else 0\n\n\nif __name__ == \"__main__\":\n    raise SystemExit(main(sys.argv[1:]))\n","python",[14,499,500,505,520,524,532,539,546,558,570,582,586,590,611,621,629,636,645,660,673,677,681,698,718,739,758,799,813,827,839,844,849,874,880,897,915,933,965,1002,1041,1049,1060,1082,1108,1116,1121,1126,1147,1164,1180,1202,1213,1225,1245,1309,1322,1344,1361,1373,1396,1401,1406,1422],{"__ignoreMap":78},[82,501,502],{"class":84,"line":85},[82,503,504],{"class":195},"# scripts\u002Ftriage_audit.py\n",[82,506,507,511,514,517],{"class":84,"line":115},[82,508,510],{"class":509},"szBVR","from",[82,512,513],{"class":96}," __future__",[82,515,516],{"class":509}," import",[82,518,519],{"class":205}," annotations\n",[82,521,522],{"class":84,"line":212},[82,523,289],{"emptyLinePlaceholder":288},[82,525,526,529],{"class":84,"line":221},[82,527,528],{"class":509},"import",[82,530,531],{"class":205}," json\n",[82,533,534,536],{"class":84,"line":229},[82,535,528],{"class":509},[82,537,538],{"class":205}," sys\n",[82,540,541,543],{"class":84,"line":255},[82,542,528],{"class":509},[82,544,545],{"class":205}," tomllib\n",[82,547,548,550,553,555],{"class":84,"line":263},[82,549,510],{"class":509},[82,551,552],{"class":205}," dataclasses ",[82,554,528],{"class":509},[82,556,557],{"class":205}," dataclass\n",[82,559,560,562,565,567],{"class":84,"line":277},[82,561,510],{"class":509},[82,563,564],{"class":205}," datetime ",[82,566,528],{"class":509},[82,568,569],{"class":205}," date\n",[82,571,572,574,577,579],{"class":84,"line":285},[82,573,510],{"class":509},[82,575,576],{"class":205}," pathlib ",[82,578,528],{"class":509},[82,580,581],{"class":205}," Path\n",[82,583,584],{"class":84,"line":292},[82,585,289],{"emptyLinePlaceholder":288},[82,587,588],{"class":84,"line":300},[82,589,289],{"emptyLinePlaceholder":288},[82,591,592,595,598,602,605,608],{"class":84,"line":311},[82,593,594],{"class":88},"@dataclass",[82,596,597],{"class":205},"(",[82,599,601],{"class":600},"s4XuR","frozen",[82,603,604],{"class":509},"=",[82,606,607],{"class":96},"True",[82,609,610],{"class":205},")\n",[82,612,613,616,619],{"class":84,"line":316},[82,614,615],{"class":509},"class",[82,617,618],{"class":88}," Finding",[82,620,218],{"class":205},[82,622,623,626],{"class":84,"line":324},[82,624,625],{"class":205},"    package: ",[82,627,628],{"class":96},"str\n",[82,630,631,634],{"class":84,"line":332},[82,632,633],{"class":205},"    version: ",[82,635,628],{"class":96},[82,637,638,641,643],{"class":84,"line":343},[82,639,640],{"class":96},"    id",[82,642,206],{"class":205},[82,644,628],{"class":96},[82,646,647,650,653,655,658],{"class":84,"line":351},[82,648,649],{"class":205},"    aliases: tuple[",[82,651,652],{"class":96},"str",[82,654,241],{"class":205},[82,656,657],{"class":96},"...",[82,659,252],{"class":205},[82,661,662,665,667,669,671],{"class":84,"line":365},[82,663,664],{"class":205},"    fixes: tuple[",[82,666,652],{"class":96},[82,668,241],{"class":205},[82,670,657],{"class":96},[82,672,252],{"class":205},[82,674,675],{"class":84,"line":377},[82,676,289],{"emptyLinePlaceholder":288},[82,678,679],{"class":84,"line":390},[82,680,289],{"emptyLinePlaceholder":288},[82,682,683,686,689,692,695],{"class":84,"line":402},[82,684,685],{"class":509},"def",[82,687,688],{"class":88}," findings",[82,690,691],{"class":205},"(report: ",[82,693,694],{"class":96},"dict",[82,696,697],{"class":205},") -> list[Finding]:\n",[82,699,701,704,706,708,710,713,715],{"class":84,"line":700},22,[82,702,703],{"class":205},"    seen: dict[tuple[",[82,705,652],{"class":96},[82,707,241],{"class":205},[82,709,652],{"class":96},[82,711,712],{"class":205},"], Finding] ",[82,714,604],{"class":509},[82,716,717],{"class":205}," {}\n",[82,719,721,724,727,730,733,736],{"class":84,"line":720},23,[82,722,723],{"class":509},"    for",[82,725,726],{"class":205}," dep ",[82,728,729],{"class":509},"in",[82,731,732],{"class":205}," report.get(",[82,734,735],{"class":92},"\"dependencies\"",[82,737,738],{"class":205},", []):\n",[82,740,742,745,748,750,753,756],{"class":84,"line":741},24,[82,743,744],{"class":509},"        for",[82,746,747],{"class":205}," v ",[82,749,729],{"class":509},[82,751,752],{"class":205}," dep.get(",[82,754,755],{"class":92},"\"vulns\"",[82,757,738],{"class":205},[82,759,761,764,766,769,772,775,778,781,784,787,790,793,796],{"class":84,"line":760},25,[82,762,763],{"class":205},"            f ",[82,765,604],{"class":509},[82,767,768],{"class":205}," Finding(dep[",[82,770,771],{"class":92},"\"name\"",[82,773,774],{"class":205},"], dep[",[82,776,777],{"class":92},"\"version\"",[82,779,780],{"class":205},"], v[",[82,782,783],{"class":92},"\"id\"",[82,785,786],{"class":205},"], ",[82,788,789],{"class":96},"tuple",[82,791,792],{"class":205},"(v.get(",[82,794,795],{"class":92},"\"aliases\"",[82,797,798],{"class":205},", [])),\n",[82,800,802,805,807,810],{"class":84,"line":801},26,[82,803,804],{"class":96},"                        tuple",[82,806,792],{"class":205},[82,808,809],{"class":92},"\"fix_versions\"",[82,811,812],{"class":205},", [])))\n",[82,814,816,819,821,824],{"class":84,"line":815},27,[82,817,818],{"class":205},"            seen[(f.package, f.id)] ",[82,820,604],{"class":509},[82,822,823],{"class":205}," f              ",[82,825,826],{"class":195},"# pip-audit can list duplicates\n",[82,828,830,833,836],{"class":84,"line":829},28,[82,831,832],{"class":509},"    return",[82,834,835],{"class":96}," list",[82,837,838],{"class":205},"(seen.values())\n",[82,840,842],{"class":84,"line":841},29,[82,843,289],{"emptyLinePlaceholder":288},[82,845,847],{"class":84,"line":846},30,[82,848,289],{"emptyLinePlaceholder":288},[82,850,852,854,857,859,861,864,866,869,871],{"class":84,"line":851},31,[82,853,685],{"class":509},[82,855,856],{"class":88}," evaluate",[82,858,691],{"class":205},[82,860,694],{"class":96},[82,862,863],{"class":205},", allowlist: ",[82,865,694],{"class":96},[82,867,868],{"class":205},", today: date) -> tuple[list[Finding], list[",[82,870,652],{"class":96},[82,872,873],{"class":205},"]]:\n",[82,875,877],{"class":84,"line":876},32,[82,878,879],{"class":92},"    \"\"\"Return (unhandled findings, problems with the allowlist).\"\"\"\n",[82,881,883,886,888,891,894],{"class":84,"line":882},33,[82,884,885],{"class":205},"    problems, allowed ",[82,887,604],{"class":509},[82,889,890],{"class":205}," [], ",[82,892,893],{"class":96},"set",[82,895,896],{"class":205},"()\n",[82,898,900,902,905,907,910,913],{"class":84,"line":899},34,[82,901,723],{"class":509},[82,903,904],{"class":205}," entry ",[82,906,729],{"class":509},[82,908,909],{"class":205}," allowlist.get(",[82,911,912],{"class":92},"\"ignore\"",[82,914,738],{"class":205},[82,916,918,921,924,927,930],{"class":84,"line":917},35,[82,919,920],{"class":509},"        if",[82,922,923],{"class":509}," not",[82,925,926],{"class":205}," entry.get(",[82,928,929],{"class":92},"\"reason\"",[82,931,932],{"class":205},"):\n",[82,934,936,939,942,945,948,951,954,957,960,963],{"class":84,"line":935},36,[82,937,938],{"class":205},"            problems.append(",[82,940,941],{"class":509},"f",[82,943,944],{"class":92},"\"",[82,946,947],{"class":96},"{",[82,949,950],{"class":205},"entry.get(",[82,952,953],{"class":92},"'id'",[82,955,956],{"class":205},")",[82,958,959],{"class":96},"}",[82,961,962],{"class":92},": an exception needs a reason\"",[82,964,610],{"class":205},[82,966,968,971,973,976,979,982,985,988,991,993,996,999],{"class":84,"line":967},37,[82,969,970],{"class":509},"        elif",[82,972,926],{"class":205},[82,974,975],{"class":92},"\"expires\"",[82,977,978],{"class":205},") ",[82,980,981],{"class":509},"is",[82,983,984],{"class":96}," None",[82,986,987],{"class":509}," or",[82,989,990],{"class":205}," entry[",[82,992,975],{"class":92},[82,994,995],{"class":205},"] ",[82,997,998],{"class":509},"\u003C",[82,1000,1001],{"class":205}," today:\n",[82,1003,1005,1007,1009,1011,1013,1016,1018,1021,1023,1026,1028,1030,1033,1035,1037,1039],{"class":84,"line":1004},38,[82,1006,938],{"class":205},[82,1008,941],{"class":509},[82,1010,944],{"class":92},[82,1012,947],{"class":96},[82,1014,1015],{"class":205},"entry[",[82,1017,953],{"class":92},[82,1019,1020],{"class":205},"]",[82,1022,959],{"class":96},[82,1024,1025],{"class":92},": exception expired on ",[82,1027,947],{"class":96},[82,1029,950],{"class":205},[82,1031,1032],{"class":92},"'expires'",[82,1034,956],{"class":205},[82,1036,959],{"class":96},[82,1038,944],{"class":92},[82,1040,610],{"class":205},[82,1042,1044,1047],{"class":84,"line":1043},39,[82,1045,1046],{"class":509},"        else",[82,1048,218],{"class":205},[82,1050,1052,1055,1057],{"class":84,"line":1051},40,[82,1053,1054],{"class":205},"            allowed.add(entry[",[82,1056,783],{"class":92},[82,1058,1059],{"class":205},"])\n",[82,1061,1063,1066,1068,1071,1074,1077,1079],{"class":84,"line":1062},41,[82,1064,1065],{"class":205},"    open_findings ",[82,1067,604],{"class":509},[82,1069,1070],{"class":205}," [f ",[82,1072,1073],{"class":509},"for",[82,1075,1076],{"class":205}," f ",[82,1078,729],{"class":509},[82,1080,1081],{"class":205}," findings(report)\n",[82,1083,1085,1088,1091,1094,1097,1100,1103,1105],{"class":84,"line":1084},42,[82,1086,1087],{"class":509},"                     if",[82,1089,1090],{"class":205}," f.id ",[82,1092,1093],{"class":509},"not",[82,1095,1096],{"class":509}," in",[82,1098,1099],{"class":205}," allowed ",[82,1101,1102],{"class":509},"and",[82,1104,923],{"class":509},[82,1106,1107],{"class":205}," allowed.intersection(f.aliases)]\n",[82,1109,1111,1113],{"class":84,"line":1110},43,[82,1112,832],{"class":509},[82,1114,1115],{"class":205}," open_findings, problems\n",[82,1117,1119],{"class":84,"line":1118},44,[82,1120,289],{"emptyLinePlaceholder":288},[82,1122,1124],{"class":84,"line":1123},45,[82,1125,289],{"emptyLinePlaceholder":288},[82,1127,1129,1131,1134,1137,1139,1142,1145],{"class":84,"line":1128},46,[82,1130,685],{"class":509},[82,1132,1133],{"class":88}," main",[82,1135,1136],{"class":205},"(argv: list[",[82,1138,652],{"class":96},[82,1140,1141],{"class":205},"]) -> ",[82,1143,1144],{"class":96},"int",[82,1146,218],{"class":205},[82,1148,1150,1153,1155,1158,1161],{"class":84,"line":1149},47,[82,1151,1152],{"class":205},"    report ",[82,1154,604],{"class":509},[82,1156,1157],{"class":205}," json.loads(Path(argv[",[82,1159,1160],{"class":96},"0",[82,1162,1163],{"class":205},"]).read_text())\n",[82,1165,1167,1170,1172,1175,1178],{"class":84,"line":1166},48,[82,1168,1169],{"class":205},"    allow_path ",[82,1171,604],{"class":509},[82,1173,1174],{"class":205}," Path(argv[",[82,1176,1177],{"class":96},"1",[82,1179,1059],{"class":205},[82,1181,1183,1186,1188,1191,1194,1197,1200],{"class":84,"line":1182},49,[82,1184,1185],{"class":205},"    allowlist ",[82,1187,604],{"class":509},[82,1189,1190],{"class":205}," tomllib.loads(allow_path.read_text()) ",[82,1192,1193],{"class":509},"if",[82,1195,1196],{"class":205}," allow_path.exists() ",[82,1198,1199],{"class":509},"else",[82,1201,717],{"class":205},[82,1203,1205,1208,1210],{"class":84,"line":1204},50,[82,1206,1207],{"class":205},"    open_findings, problems ",[82,1209,604],{"class":509},[82,1211,1212],{"class":205}," evaluate(report, allowlist, date.today())\n",[82,1214,1216,1218,1220,1222],{"class":84,"line":1215},51,[82,1217,723],{"class":509},[82,1219,1076],{"class":205},[82,1221,729],{"class":509},[82,1223,1224],{"class":205}," open_findings:\n",[82,1226,1228,1231,1233,1236,1239,1242],{"class":84,"line":1227},52,[82,1229,1230],{"class":205},"        fix ",[82,1232,604],{"class":509},[82,1234,1235],{"class":92}," \", \"",[82,1237,1238],{"class":205},".join(f.fixes) ",[82,1240,1241],{"class":509},"or",[82,1243,1244],{"class":92}," \"no fix yet\"\n",[82,1246,1248,1251,1253,1255,1258,1260,1263,1265,1268,1271,1273,1275,1277,1280,1282,1285,1287,1290,1293,1295,1298,1300,1303,1305,1307],{"class":84,"line":1247},53,[82,1249,1250],{"class":96},"        print",[82,1252,597],{"class":205},[82,1254,941],{"class":509},[82,1256,1257],{"class":92},"\"VULNERABLE ",[82,1259,947],{"class":96},[82,1261,1262],{"class":205},"f.package",[82,1264,959],{"class":96},[82,1266,1267],{"class":96}," {",[82,1269,1270],{"class":205},"f.version",[82,1272,959],{"class":96},[82,1274,206],{"class":92},[82,1276,947],{"class":96},[82,1278,1279],{"class":205},"f.id",[82,1281,959],{"class":96},[82,1283,1284],{"class":92}," (",[82,1286,947],{"class":96},[82,1288,1289],{"class":92},"', '",[82,1291,1292],{"class":205},".join(f.aliases)",[82,1294,959],{"class":96},[82,1296,1297],{"class":92},") -> ",[82,1299,947],{"class":96},[82,1301,1302],{"class":205},"fix",[82,1304,959],{"class":96},[82,1306,944],{"class":92},[82,1308,610],{"class":205},[82,1310,1312,1314,1317,1319],{"class":84,"line":1311},54,[82,1313,723],{"class":509},[82,1315,1316],{"class":205}," p ",[82,1318,729],{"class":509},[82,1320,1321],{"class":205}," problems:\n",[82,1323,1325,1327,1329,1331,1334,1336,1338,1340,1342],{"class":84,"line":1324},55,[82,1326,1250],{"class":96},[82,1328,597],{"class":205},[82,1330,941],{"class":509},[82,1332,1333],{"class":92},"\"ALLOWLIST ",[82,1335,947],{"class":96},[82,1337,10],{"class":205},[82,1339,959],{"class":96},[82,1341,944],{"class":92},[82,1343,610],{"class":205},[82,1345,1347,1350,1352,1355,1357,1359],{"class":84,"line":1346},56,[82,1348,1349],{"class":509},"    if",[82,1351,923],{"class":509},[82,1353,1354],{"class":205}," open_findings ",[82,1356,1102],{"class":509},[82,1358,923],{"class":509},[82,1360,1321],{"class":205},[82,1362,1364,1366,1368,1371],{"class":84,"line":1363},57,[82,1365,1250],{"class":96},[82,1367,597],{"class":205},[82,1369,1370],{"class":92},"\"audit clean\"",[82,1372,610],{"class":205},[82,1374,1376,1378,1381,1384,1386,1388,1391,1393],{"class":84,"line":1375},58,[82,1377,832],{"class":509},[82,1379,1380],{"class":96}," 1",[82,1382,1383],{"class":509}," if",[82,1385,1354],{"class":205},[82,1387,1241],{"class":509},[82,1389,1390],{"class":205}," problems ",[82,1392,1199],{"class":509},[82,1394,1395],{"class":96}," 0\n",[82,1397,1399],{"class":84,"line":1398},59,[82,1400,289],{"emptyLinePlaceholder":288},[82,1402,1404],{"class":84,"line":1403},60,[82,1405,289],{"emptyLinePlaceholder":288},[82,1407,1409,1411,1414,1417,1420],{"class":84,"line":1408},61,[82,1410,1193],{"class":509},[82,1412,1413],{"class":96}," __name__",[82,1415,1416],{"class":509}," ==",[82,1418,1419],{"class":92}," \"__main__\"",[82,1421,218],{"class":205},[82,1423,1425,1428,1431,1434,1436],{"class":84,"line":1424},62,[82,1426,1427],{"class":509},"    raise",[82,1429,1430],{"class":96}," SystemExit",[82,1432,1433],{"class":205},"(main(sys.argv[",[82,1435,1177],{"class":96},[82,1437,1438],{"class":205},":]))\n",[130,1440],{"name":1441},"audit-triage-flow",[10,1443,1444],{},"The expiry date is the important part. It forces a periodic re-check of every exception — perhaps the code path is now used, perhaps a fix has shipped and the exception can simply be deleted by upgrading.",[25,1446,1448],{"id":1447},"fixing-what-you-find","Fixing what you find",[10,1450,1451],{},"For most findings, the fix is an upgrade of the vulnerable package in the lock file:",[73,1453,1455],{"className":75,"code":1454,"language":77,"meta":78,"style":78},"uv lock --upgrade-package jinja2\nuv run pytest\n",[14,1456,1457,1470],{"__ignoreMap":78},[82,1458,1459,1461,1464,1467],{"class":84,"line":85},[82,1460,89],{"class":88},[82,1462,1463],{"class":92}," lock",[82,1465,1466],{"class":96}," --upgrade-package",[82,1468,1469],{"class":92}," jinja2\n",[82,1471,1472,1474,1477],{"class":84,"line":115},[82,1473,89],{"class":88},[82,1475,1476],{"class":92}," run",[82,1478,1479],{"class":92}," pytest\n",[10,1481,1482,1485,1486,1489,1490,1494,1495,1498,1499,1501,1502,1505],{},[14,1483,1484],{},"uv lock --upgrade-package"," moves only that package (and whatever its new version requires), keeping the change small and reviewable. If the fixed version is excluded by a constraint in your own ",[14,1487,1488],{},"pyproject.toml",", relax the constraint deliberately. If the vulnerable package is a ",[1491,1492,1493],"em",{},"transitive"," dependency whose parent pins an old version, either upgrade the parent or add a direct lower bound for the fixed version and let the resolver find a compatible set. ",[14,1496,1497],{},"pip-audit --fix"," can upgrade an environment automatically, but it does not edit ",[14,1500,38],{},", so for locked projects the explicit ",[14,1503,1504],{},"uv lock"," command is the right tool.",[10,1507,1508,1509,1512],{},"When no fix exists yet, the choices are to add an allowlist entry with a short expiry while you watch the advisory, to stop using the vulnerable feature, or to replace the dependency. Write down which and why — the allowlist's ",[14,1510,1511],{},"reason"," field is the natural place.",[130,1514],{"name":1515},"audit-terminal",[25,1517,1519],{"id":1518},"ux-considerations","UX considerations",[10,1521,1522],{},"The \"users\" of an audit are your maintainers, and a noisy or confusing audit gets ignored:",[30,1524,1525,1531,1537,1543,1557],{},[33,1526,1527,1530],{},[176,1528,1529],{},"Fail with an actionable line per finding",": package, installed version, advisory ID with aliases, and fixed versions. The triage script prints exactly that.",[33,1532,1533,1536],{},[176,1534,1535],{},"Separate runtime from development dependencies."," A vulnerability in a test-only tool is worth knowing about but rarely urgent; do not block releases on it.",[33,1538,1539,1542],{},[176,1540,1541],{},"Keep the allowlist in the repository",", reviewed like code, so exceptions are visible in pull requests.",[33,1544,1545,1548,1549,1552,1553,1556],{},[176,1546,1547],{},"Run the same command locally."," A ",[14,1550,1551],{},"just audit"," or ",[14,1554,1555],{},"make audit"," target that matches CI lets contributors reproduce a failure without guessing.",[33,1558,1559,1562],{},[176,1560,1561],{},"Mention advisories in release notes"," when you ship a fix, so users know to upgrade.",[25,1564,1566],{"id":1565},"testing-the-behaviour","Testing the behaviour",[10,1568,1569],{},"The triage logic is pure and easy to test with small report fixtures:",[73,1571,1573],{"className":495,"code":1572,"language":497,"meta":78,"style":78},"# tests\u002Ftest_triage_audit.py\nfrom datetime import date\n\nfrom scripts.triage_audit import evaluate\n\nREPORT = {\"dependencies\": [\n    {\"name\": \"jinja2\", \"version\": \"3.1.2\", \"vulns\": [\n        {\"id\": \"PYSEC-1\", \"aliases\": [\"GHSA-aaaa\"], \"fix_versions\": [\"3.1.3\"]},\n        {\"id\": \"PYSEC-1\", \"aliases\": [\"GHSA-aaaa\"], \"fix_versions\": [\"3.1.3\"]},\n        {\"id\": \"PYSEC-2\", \"aliases\": [], \"fix_versions\": []},\n    ]},\n    {\"name\": \"click\", \"version\": \"8.5.0\", \"vulns\": []},\n]}\nTODAY = date(2026, 10, 2)\n\n\ndef entry(id, expires=date(2026, 12, 31), reason=\"not reachable\"):\n    return {\"ignore\": [{\"id\": id, \"reason\": reason, \"expires\": expires}]}\n\n\ndef test_duplicates_collapse():\n    found, problems = evaluate(REPORT, {}, TODAY)\n    assert sorted(f.id for f in found) == [\"PYSEC-1\", \"PYSEC-2\"] and problems == []\n\n\ndef test_alias_matches_allowlist():\n    found, _ = evaluate(REPORT, entry(\"GHSA-aaaa\"), TODAY)\n    assert [f.id for f in found] == [\"PYSEC-2\"]\n\n\ndef test_expired_exception_is_a_problem():\n    found, problems = evaluate(REPORT, entry(\"PYSEC-1\", expires=date(2026, 9, 1)), TODAY)\n    assert \"PYSEC-1\" in [f.id for f in found]\n    assert \"expired\" in problems[0]\n\n\ndef test_exception_without_reason_is_rejected():\n    _, problems = evaluate(REPORT, entry(\"PYSEC-2\", reason=\"\"), TODAY)\n    assert \"needs a reason\" in problems[0]\n",[14,1574,1575,1580,1590,1594,1606,1610,1625,1652,1685,1713,1736,1741,1767,1772,1797,1801,1805,1842,1872,1876,1880,1890,1909,1952,1956,1960,1969,1992,2016,2020,2024,2033,2074,2094,2110,2114,2118,2127,2157],{"__ignoreMap":78},[82,1576,1577],{"class":84,"line":85},[82,1578,1579],{"class":195},"# tests\u002Ftest_triage_audit.py\n",[82,1581,1582,1584,1586,1588],{"class":84,"line":115},[82,1583,510],{"class":509},[82,1585,564],{"class":205},[82,1587,528],{"class":509},[82,1589,569],{"class":205},[82,1591,1592],{"class":84,"line":212},[82,1593,289],{"emptyLinePlaceholder":288},[82,1595,1596,1598,1601,1603],{"class":84,"line":221},[82,1597,510],{"class":509},[82,1599,1600],{"class":205}," scripts.triage_audit ",[82,1602,528],{"class":509},[82,1604,1605],{"class":205}," evaluate\n",[82,1607,1608],{"class":84,"line":229},[82,1609,289],{"emptyLinePlaceholder":288},[82,1611,1612,1615,1618,1620,1622],{"class":84,"line":255},[82,1613,1614],{"class":96},"REPORT",[82,1616,1617],{"class":509}," =",[82,1619,1267],{"class":205},[82,1621,735],{"class":92},[82,1623,1624],{"class":205},": [\n",[82,1626,1627,1630,1632,1634,1637,1639,1641,1643,1646,1648,1650],{"class":84,"line":263},[82,1628,1629],{"class":205},"    {",[82,1631,771],{"class":92},[82,1633,206],{"class":205},[82,1635,1636],{"class":92},"\"jinja2\"",[82,1638,241],{"class":205},[82,1640,777],{"class":92},[82,1642,206],{"class":205},[82,1644,1645],{"class":92},"\"3.1.2\"",[82,1647,241],{"class":205},[82,1649,755],{"class":92},[82,1651,1624],{"class":205},[82,1653,1654,1657,1659,1661,1664,1666,1668,1670,1673,1675,1677,1679,1682],{"class":84,"line":277},[82,1655,1656],{"class":205},"        {",[82,1658,783],{"class":92},[82,1660,206],{"class":205},[82,1662,1663],{"class":92},"\"PYSEC-1\"",[82,1665,241],{"class":205},[82,1667,795],{"class":92},[82,1669,235],{"class":205},[82,1671,1672],{"class":92},"\"GHSA-aaaa\"",[82,1674,786],{"class":205},[82,1676,809],{"class":92},[82,1678,235],{"class":205},[82,1680,1681],{"class":92},"\"3.1.3\"",[82,1683,1684],{"class":205},"]},\n",[82,1686,1687,1689,1691,1693,1695,1697,1699,1701,1703,1705,1707,1709,1711],{"class":84,"line":285},[82,1688,1656],{"class":205},[82,1690,783],{"class":92},[82,1692,206],{"class":205},[82,1694,1663],{"class":92},[82,1696,241],{"class":205},[82,1698,795],{"class":92},[82,1700,235],{"class":205},[82,1702,1672],{"class":92},[82,1704,786],{"class":205},[82,1706,809],{"class":92},[82,1708,235],{"class":205},[82,1710,1681],{"class":92},[82,1712,1684],{"class":205},[82,1714,1715,1717,1719,1721,1724,1726,1728,1731,1733],{"class":84,"line":292},[82,1716,1656],{"class":205},[82,1718,783],{"class":92},[82,1720,206],{"class":205},[82,1722,1723],{"class":92},"\"PYSEC-2\"",[82,1725,241],{"class":205},[82,1727,795],{"class":92},[82,1729,1730],{"class":205},": [], ",[82,1732,809],{"class":92},[82,1734,1735],{"class":205},": []},\n",[82,1737,1738],{"class":84,"line":300},[82,1739,1740],{"class":205},"    ]},\n",[82,1742,1743,1745,1747,1749,1752,1754,1756,1758,1761,1763,1765],{"class":84,"line":311},[82,1744,1629],{"class":205},[82,1746,771],{"class":92},[82,1748,206],{"class":205},[82,1750,1751],{"class":92},"\"click\"",[82,1753,241],{"class":205},[82,1755,777],{"class":92},[82,1757,206],{"class":205},[82,1759,1760],{"class":92},"\"8.5.0\"",[82,1762,241],{"class":205},[82,1764,755],{"class":92},[82,1766,1735],{"class":205},[82,1768,1769],{"class":84,"line":316},[82,1770,1771],{"class":205},"]}\n",[82,1773,1774,1777,1779,1782,1785,1787,1790,1792,1795],{"class":84,"line":324},[82,1775,1776],{"class":96},"TODAY",[82,1778,1617],{"class":509},[82,1780,1781],{"class":205}," date(",[82,1783,1784],{"class":96},"2026",[82,1786,241],{"class":205},[82,1788,1789],{"class":96},"10",[82,1791,241],{"class":205},[82,1793,1794],{"class":96},"2",[82,1796,610],{"class":205},[82,1798,1799],{"class":84,"line":332},[82,1800,289],{"emptyLinePlaceholder":288},[82,1802,1803],{"class":84,"line":343},[82,1804,289],{"emptyLinePlaceholder":288},[82,1806,1807,1809,1812,1815,1817,1820,1822,1824,1827,1829,1832,1835,1837,1840],{"class":84,"line":351},[82,1808,685],{"class":509},[82,1810,1811],{"class":88}," entry",[82,1813,1814],{"class":205},"(id, expires",[82,1816,604],{"class":509},[82,1818,1819],{"class":205},"date(",[82,1821,1784],{"class":96},[82,1823,241],{"class":205},[82,1825,1826],{"class":96},"12",[82,1828,241],{"class":205},[82,1830,1831],{"class":96},"31",[82,1833,1834],{"class":205},"), reason",[82,1836,604],{"class":509},[82,1838,1839],{"class":92},"\"not reachable\"",[82,1841,932],{"class":205},[82,1843,1844,1846,1848,1850,1853,1855,1857,1860,1862,1864,1867,1869],{"class":84,"line":365},[82,1845,832],{"class":509},[82,1847,1267],{"class":205},[82,1849,912],{"class":92},[82,1851,1852],{"class":205},": [{",[82,1854,783],{"class":92},[82,1856,206],{"class":205},[82,1858,1859],{"class":96},"id",[82,1861,241],{"class":205},[82,1863,929],{"class":92},[82,1865,1866],{"class":205},": reason, ",[82,1868,975],{"class":92},[82,1870,1871],{"class":205},": expires}]}\n",[82,1873,1874],{"class":84,"line":377},[82,1875,289],{"emptyLinePlaceholder":288},[82,1877,1878],{"class":84,"line":390},[82,1879,289],{"emptyLinePlaceholder":288},[82,1881,1882,1884,1887],{"class":84,"line":402},[82,1883,685],{"class":509},[82,1885,1886],{"class":88}," test_duplicates_collapse",[82,1888,1889],{"class":205},"():\n",[82,1891,1892,1895,1897,1900,1902,1905,1907],{"class":84,"line":700},[82,1893,1894],{"class":205},"    found, problems ",[82,1896,604],{"class":509},[82,1898,1899],{"class":205}," evaluate(",[82,1901,1614],{"class":96},[82,1903,1904],{"class":205},", {}, ",[82,1906,1776],{"class":96},[82,1908,610],{"class":205},[82,1910,1911,1914,1917,1920,1922,1924,1926,1929,1932,1935,1937,1939,1941,1943,1945,1947,1949],{"class":84,"line":720},[82,1912,1913],{"class":509},"    assert",[82,1915,1916],{"class":96}," sorted",[82,1918,1919],{"class":205},"(f.id ",[82,1921,1073],{"class":509},[82,1923,1076],{"class":205},[82,1925,729],{"class":509},[82,1927,1928],{"class":205}," found) ",[82,1930,1931],{"class":509},"==",[82,1933,1934],{"class":205}," [",[82,1936,1663],{"class":92},[82,1938,241],{"class":205},[82,1940,1723],{"class":92},[82,1942,995],{"class":205},[82,1944,1102],{"class":509},[82,1946,1390],{"class":205},[82,1948,1931],{"class":509},[82,1950,1951],{"class":205}," []\n",[82,1953,1954],{"class":84,"line":741},[82,1955,289],{"emptyLinePlaceholder":288},[82,1957,1958],{"class":84,"line":760},[82,1959,289],{"emptyLinePlaceholder":288},[82,1961,1962,1964,1967],{"class":84,"line":801},[82,1963,685],{"class":509},[82,1965,1966],{"class":88}," test_alias_matches_allowlist",[82,1968,1889],{"class":205},[82,1970,1971,1974,1976,1978,1980,1983,1985,1988,1990],{"class":84,"line":815},[82,1972,1973],{"class":205},"    found, _ ",[82,1975,604],{"class":509},[82,1977,1899],{"class":205},[82,1979,1614],{"class":96},[82,1981,1982],{"class":205},", entry(",[82,1984,1672],{"class":92},[82,1986,1987],{"class":205},"), ",[82,1989,1776],{"class":96},[82,1991,610],{"class":205},[82,1993,1994,1996,1999,2001,2003,2005,2008,2010,2012,2014],{"class":84,"line":829},[82,1995,1913],{"class":509},[82,1997,1998],{"class":205}," [f.id ",[82,2000,1073],{"class":509},[82,2002,1076],{"class":205},[82,2004,729],{"class":509},[82,2006,2007],{"class":205}," found] ",[82,2009,1931],{"class":509},[82,2011,1934],{"class":205},[82,2013,1723],{"class":92},[82,2015,252],{"class":205},[82,2017,2018],{"class":84,"line":841},[82,2019,289],{"emptyLinePlaceholder":288},[82,2021,2022],{"class":84,"line":846},[82,2023,289],{"emptyLinePlaceholder":288},[82,2025,2026,2028,2031],{"class":84,"line":851},[82,2027,685],{"class":509},[82,2029,2030],{"class":88}," test_expired_exception_is_a_problem",[82,2032,1889],{"class":205},[82,2034,2035,2037,2039,2041,2043,2045,2047,2049,2052,2054,2056,2058,2060,2063,2065,2067,2070,2072],{"class":84,"line":876},[82,2036,1894],{"class":205},[82,2038,604],{"class":509},[82,2040,1899],{"class":205},[82,2042,1614],{"class":96},[82,2044,1982],{"class":205},[82,2046,1663],{"class":92},[82,2048,241],{"class":205},[82,2050,2051],{"class":600},"expires",[82,2053,604],{"class":509},[82,2055,1819],{"class":205},[82,2057,1784],{"class":96},[82,2059,241],{"class":205},[82,2061,2062],{"class":96},"9",[82,2064,241],{"class":205},[82,2066,1177],{"class":96},[82,2068,2069],{"class":205},")), ",[82,2071,1776],{"class":96},[82,2073,610],{"class":205},[82,2075,2076,2078,2081,2083,2085,2087,2089,2091],{"class":84,"line":882},[82,2077,1913],{"class":509},[82,2079,2080],{"class":92}," \"PYSEC-1\"",[82,2082,1096],{"class":509},[82,2084,1998],{"class":205},[82,2086,1073],{"class":509},[82,2088,1076],{"class":205},[82,2090,729],{"class":509},[82,2092,2093],{"class":205}," found]\n",[82,2095,2096,2098,2101,2103,2106,2108],{"class":84,"line":899},[82,2097,1913],{"class":509},[82,2099,2100],{"class":92}," \"expired\"",[82,2102,1096],{"class":509},[82,2104,2105],{"class":205}," problems[",[82,2107,1160],{"class":96},[82,2109,252],{"class":205},[82,2111,2112],{"class":84,"line":917},[82,2113,289],{"emptyLinePlaceholder":288},[82,2115,2116],{"class":84,"line":935},[82,2117,289],{"emptyLinePlaceholder":288},[82,2119,2120,2122,2125],{"class":84,"line":967},[82,2121,685],{"class":509},[82,2123,2124],{"class":88}," test_exception_without_reason_is_rejected",[82,2126,1889],{"class":205},[82,2128,2129,2132,2134,2136,2138,2140,2142,2144,2146,2148,2151,2153,2155],{"class":84,"line":1004},[82,2130,2131],{"class":205},"    _, problems ",[82,2133,604],{"class":509},[82,2135,1899],{"class":205},[82,2137,1614],{"class":96},[82,2139,1982],{"class":205},[82,2141,1723],{"class":92},[82,2143,241],{"class":205},[82,2145,1511],{"class":600},[82,2147,604],{"class":509},[82,2149,2150],{"class":92},"\"\"",[82,2152,1987],{"class":205},[82,2154,1776],{"class":96},[82,2156,610],{"class":205},[82,2158,2159,2161,2164,2166,2168,2170],{"class":84,"line":1043},[82,2160,1913],{"class":509},[82,2162,2163],{"class":92}," \"needs a reason\"",[82,2165,1096],{"class":509},[82,2167,2105],{"class":205},[82,2169,1160],{"class":96},[82,2171,252],{"class":205},[10,2173,2174,2175,2178,2179,2182,2183,2186,2187,2189],{},"Add a ",[14,2176,2177],{},"__init__.py"," to ",[14,2180,2181],{},"scripts\u002F"," (or put the module in your package) so tests can import it. For an end-to-end check, commit a small ",[14,2184,2185],{},"audit.json"," fixture captured from a real run, so changes to ",[14,2188,16],{},"'s output format show up as a failing test rather than a silently passing audit.",[25,2191,2193],{"id":2192},"conclusion","Conclusion",[10,2195,2196,2197,2199,2200,2202,2203,2205,2206,2210,2211,2215],{},"A dependency audit is cheap insurance: export the lock file, run ",[14,2198,16],{}," with ",[14,2201,145],{},", and gate both pull requests and a daily schedule on the result. What keeps it useful over months is triage discipline — exceptions with reasons and expiry dates, alias-aware matching, and targeted ",[14,2204,1484],{}," fixes. Combined with ",[19,2207,2209],{"href":2208},"\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fpinning-dependencies-with-hashes\u002F","hash pinning"," and an ",[19,2212,2214],{"href":2213},"\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fgenerating-an-sbom-for-a-python-cli\u002F","SBOM",", it gives you a clear, defensible answer to \"are we shipping anything known to be vulnerable?\".",[25,2217,2219],{"id":2218},"frequently-asked-questions","Frequently asked questions",[2221,2222,2224,2225,2228],"h3",{"id":2223},"how-is-pip-audit-different-from-safety-or-githubs-dependabot-alerts","How is pip-audit different from ",[14,2226,2227],{},"safety"," or GitHub's Dependabot alerts?",[10,2230,2231,2232,2234],{},"All three check dependencies against advisory data. ",[14,2233,16],{}," is free, maintained by PyPA, uses the open PyPA and OSV databases, and runs anywhere, which makes it a good CI gate. Dependabot alerts are convenient on GitHub and can open fix pull requests; running both is common and they complement each other.",[2221,2236,2238],{"id":2237},"does-pip-audit-scan-my-own-code-for-vulnerabilities","Does pip-audit scan my own code for vulnerabilities?",[10,2240,2241,2242,2245,2246,23],{},"No — it only checks declared dependencies against known advisories. For your own code, use a static analyser such as Bandit or Ruff's ",[14,2243,2244],{},"S"," (flake8-bandit) rules, covered in ",[19,2247,2249],{"href":2248},"\u002Fproject-setup-dependency-management\u002Flinting-and-type-checking-cli-code\u002Fconfiguring-ruff-for-a-cli-project\u002F","configuring Ruff for a CLI project",[2221,2251,2253],{"id":2252},"why-does-the-same-vulnerability-appear-under-different-ids","Why does the same vulnerability appear under different IDs?",[10,2255,2256,2257,241,2260,241,2263,2266,2267,2269],{},"Advisory databases assign their own identifiers — ",[14,2258,2259],{},"PYSEC-…",[14,2261,2262],{},"GHSA-…",[14,2264,2265],{},"CVE-…"," — for the same issue. ",[14,2268,16],{}," reports one ID and lists the others as aliases, which is why the triage script matches allowlist entries against both.",[2221,2271,2273],{"id":2272},"should-the-audit-block-releases","Should the audit block releases?",[10,2275,2276],{},"Block on runtime dependencies with known fixes. For advisories without a fix, or in development-only tools, record an allowlist entry and release anyway — blocking a release over something you cannot fix only delays other fixes.",[25,2278,2280],{"id":2279},"related","Related",[30,2282,2283,2289,2294,2299,2305],{},[33,2284,2285,2286],{},"Up: ",[19,2287,2288],{"href":21},"Securing the supply chain of a Python CLI",[33,2290,2291],{},[19,2292,2293],{"href":2208},"Pinning dependencies with hashes",[33,2295,2296],{},[19,2297,2298],{"href":2213},"Generating an SBOM for a Python CLI",[33,2300,2301],{},[19,2302,2304],{"href":2303},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Fcaching-uv-dependencies-in-ci\u002F","Caching uv dependencies in CI",[33,2306,2307],{},[19,2308,2310],{"href":2309},"\u002Fproject-setup-dependency-management\u002Fpre-commit-hooks-for-cli-projects\u002Fsetting-up-pre-commit-for-python-cli-repos\u002F","Setting up pre-commit for Python CLI repos",[2312,2313,2314],"style",{},"html pre.shiki code .sScJk, html code.shiki .sScJk{--shiki-default:#6F42C1;--shiki-dark:#B392F0}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sJ8bj, html code.shiki .sJ8bj{--shiki-default:#6A737D;--shiki-dark:#6A737D}html pre.shiki code .s9eBZ, html code.shiki .s9eBZ{--shiki-default:#22863A;--shiki-dark:#85E89D}html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .s4XuR, html code.shiki .s4XuR{--shiki-default:#E36209;--shiki-dark:#FFAB70}",{"title":78,"searchDepth":115,"depth":115,"links":2316},[2317,2318,2319,2320,2321,2322,2323,2324,2325,2332],{"id":27,"depth":115,"text":28},{"id":65,"depth":115,"text":66},{"id":170,"depth":115,"text":171},{"id":423,"depth":115,"text":424},{"id":1447,"depth":115,"text":1448},{"id":1518,"depth":115,"text":1519},{"id":1565,"depth":115,"text":1566},{"id":2192,"depth":115,"text":2193},{"id":2218,"depth":115,"text":2219,"children":2326},[2327,2329,2330,2331],{"id":2223,"depth":212,"text":2328},"How is pip-audit different from safety or GitHub's Dependabot alerts?",{"id":2237,"depth":212,"text":2238},{"id":2252,"depth":212,"text":2253},{"id":2272,"depth":212,"text":2273},{"id":2279,"depth":115,"text":2280},"2026-10-02","Scan a CLI’s locked dependencies for known vulnerabilities with pip-audit, gate pull requests, run weekly, and triage with an allowlist whose exceptions expire.","intermediate",false,"md",{},"\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fauditing-dependencies-with-pip-audit",{"title":5,"description":2334},"project-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fauditing-dependencies-with-pip-audit\u002Findex",[2343,16,2344,2345,89],"security","dependencies","ci","CAB40gvwBeQSmiHjDXlwfwuPPc6hxucmnlMySCl94U4",[2348,2351,2354,2357,2360,2363,2366,2369,2372,2375,2378,2381,2384,2387,2390,2393,2396,2399,2402,2405,2408,2411,2414,2417,2420,2423,2426,2429,2432,2435,2438,2441,2444,2447,2450,2453,2456,2459,2462,2465,2468,2471,2474,2477,2480,2483,2486,2489,2492,2495,2498,2501,2504,2507,2510,2513,2516,2519,2522,2525,2528,2531,2534,2537,2540,2543,2546,2549,2552,2555,2558,2561,2564,2567,2570,2573,2576,2579,2582,2585,2588,2591,2594,2597,2600,2603,2606,2609,2612,2615,2618,2621,2624,2627,2630,2633,2636,2639,2642,2645,2648,2651,2654,2657,2660,2663,2666,2669,2672,2675,2678,2681,2684,2687,2690,2693,2696,2699,2702,2705,2708,2711,2714,2717,2720,2723,2726,2729,2732,2735,2738,2741,2744,2747,2750,2753,2756,2759,2762,2765,2768,2771,2774,2777,2780,2783,2786,2789,2792,2795,2798,2801,2804,2807,2810,2813,2816,2819,2822,2825,2828,2831,2834,2837,2840,2843,2846,2849,2852,2855,2858,2861,2864,2867,2870,2873,2876,2879,2882,2885,2888,2891,2894,2897,2900,2903,2906,2909,2912,2915,2918,2921,2924,2927,2930,2933,2936,2939,2942,2945,2948,2951,2954,2957,2960,2963,2966,2969,2972,2975,2978,2981,2984,2987,2990,2993,2996,2999,3002,3005,3008,3011,3014,3017,3020,3023,3026,3029,3032,3035,3038,3041,3044,3047,3050,3053,3056,3059,3062,3065,3068,3071,3074,3077,3080,3083,3086,3089,3092,3095,3098,3101,3104,3107,3110,3113,3116,3119,3122,3124,3127,3130,3133,3134,3137,3140,3143,3146,3149,3152,3155,3158,3161,3164,3167,3170,3173,3176,3179,3182,3185,3188],{"path":2349,"title":2350},"\u002Fabout","About Python CLI Toolcraft",{"path":2352,"title":2353},"\u002Fadvanced-input-parsing-user-experience\u002Fadvanced-argument-validation-strategies","Advanced Argument Validation Strategies",{"path":2355,"title":2356},"\u002Fadvanced-input-parsing-user-experience\u002Fadvanced-argument-validation-strategies\u002Fparsing-nested-json-arguments-in-python-clis","Parsing Nested JSON Args in Python CLIs",{"path":2358,"title":2359},"\u002Fadvanced-input-parsing-user-experience\u002Fadvanced-argument-validation-strategies\u002Fvalidating-dates-and-durations-in-cli-arguments","Validating Dates and Durations in Python CLI Arguments",{"path":2361,"title":2362},"\u002Fadvanced-input-parsing-user-experience\u002Fadvanced-argument-validation-strategies\u002Fvalidating-dependent-and-conflicting-options","Validating Dependent and Conflicting CLI Options",{"path":2364,"title":2365},"\u002Fadvanced-input-parsing-user-experience\u002Fadvanced-argument-validation-strategies\u002Fvalidating-file-and-directory-paths-in-clis","Validating File and Directory Paths in CLIs",{"path":2367,"title":2368},"\u002Fadvanced-input-parsing-user-experience\u002Fadvanced-argument-validation-strategies\u002Fvalidating-urls-hosts-and-ports","Validating URLs, Hosts and Ports in Python CLI Arguments",{"path":2370,"title":2371},"\u002Fadvanced-input-parsing-user-experience\u002Fadvanced-argument-validation-strategies\u002Fwriting-custom-click-parameter-types","Writing Custom Click Parameter Types",{"path":2373,"title":2374},"\u002Fadvanced-input-parsing-user-experience\u002Fbuilding-terminal-uis-with-textual\u002Fbrowsing-records-with-a-textual-datatable","Browsing Records with a Textual DataTable Picker",{"path":2376,"title":2377},"\u002Fadvanced-input-parsing-user-experience\u002Fbuilding-terminal-uis-with-textual\u002Fbuilding-your-first-textual-app","Building Your First Textual App for a Python CLI",{"path":2379,"title":2380},"\u002Fadvanced-input-parsing-user-experience\u002Fbuilding-terminal-uis-with-textual\u002Fchoosing-between-a-cli-a-prompt-flow-and-a-tui","Choosing Between a CLI, a Prompt Flow and a TUI",{"path":2382,"title":2383},"\u002Fadvanced-input-parsing-user-experience\u002Fbuilding-terminal-uis-with-textual","Building Terminal UIs with Textual for Python CLIs",{"path":2385,"title":2386},"\u002Fadvanced-input-parsing-user-experience\u002Fbuilding-terminal-uis-with-textual\u002Frunning-background-work-in-textual-with-workers","Running Background Work in Textual with Workers",{"path":2388,"title":2389},"\u002Fadvanced-input-parsing-user-experience\u002Fbuilding-terminal-uis-with-textual\u002Fstyling-textual-apps-with-tcss","Styling Textual Apps with TCSS",{"path":2391,"title":2392},"\u002Fadvanced-input-parsing-user-experience\u002Fbuilding-terminal-uis-with-textual\u002Ftesting-textual-apps-with-pilot","Testing Textual Apps with Pilot",{"path":2394,"title":2395},"\u002Fadvanced-input-parsing-user-experience\u002Fcli-help-output-and-documentation\u002Fadding-examples-and-epilogs-to-help-output","Adding Examples and Epilogs to Help Output",{"path":2397,"title":2398},"\u002Fadvanced-input-parsing-user-experience\u002Fcli-help-output-and-documentation\u002Fdocumenting-environment-variables-in-help","Documenting Environment Variables in CLI Help",{"path":2400,"title":2401},"\u002Fadvanced-input-parsing-user-experience\u002Fcli-help-output-and-documentation\u002Fgenerating-man-pages-and-docs-from-a-cli","Generating Man Pages and Docs from a CLI",{"path":2403,"title":2404},"\u002Fadvanced-input-parsing-user-experience\u002Fcli-help-output-and-documentation","CLI Help Output and Documentation",{"path":2406,"title":2407},"\u002Fadvanced-input-parsing-user-experience\u002Fcli-help-output-and-documentation\u002Frich-formatted-help-with-rich-click","Rich-Formatted Help for Click CLIs with rich-click",{"path":2409,"title":2410},"\u002Fadvanced-input-parsing-user-experience\u002Fcli-help-output-and-documentation\u002Fversioning-and-deprecating-cli-flags","Versioning and Deprecating CLI Flags",{"path":2412,"title":2413},"\u002Fadvanced-input-parsing-user-experience\u002Fcli-help-output-and-documentation\u002Fwriting-help-text-users-actually-read","Writing Help Text Users Actually Read",{"path":2415,"title":2416},"\u002Fadvanced-input-parsing-user-experience\u002Fcross-platform-terminal-compatibility\u002Fadapting-output-to-terminal-width","Adapting Python CLI Output to Terminal Width",{"path":2418,"title":2419},"\u002Fadvanced-input-parsing-user-experience\u002Fcross-platform-terminal-compatibility\u002Fdetecting-ci-environments-and-non-interactive-shells","Detecting CI Environments and Non-Interactive Shells",{"path":2421,"title":2422},"\u002Fadvanced-input-parsing-user-experience\u002Fcross-platform-terminal-compatibility\u002Ffixing-unicode-and-encoding-errors-on-windows","Fixing Unicode and Encoding Errors on Windows in Python CLIs",{"path":2424,"title":2425},"\u002Fadvanced-input-parsing-user-experience\u002Fcross-platform-terminal-compatibility\u002Fhandling-ansi-escape-codes-on-windows-consoles","Handling ANSI Escape Codes on Windows Consoles",{"path":2427,"title":2428},"\u002Fadvanced-input-parsing-user-experience\u002Fcross-platform-terminal-compatibility","Cross-Platform Terminal Compatibility for Python CLIs",{"path":2430,"title":2431},"\u002Fadvanced-input-parsing-user-experience\u002Fcross-platform-terminal-compatibility\u002Frespecting-no-color-and-force-color","Respecting NO_COLOR and FORCE_COLOR in Python CLIs",{"path":2433,"title":2434},"\u002Fadvanced-input-parsing-user-experience\u002Fcross-platform-terminal-compatibility\u002Fsupporting-dumb-terminals-and-screen-readers","Supporting Dumb Terminals and Screen Readers in a Python CLI",{"path":2436,"title":2437},"\u002Fadvanced-input-parsing-user-experience\u002Ferror-handling-and-exit-codes\u002Fchoosing-exit-codes-for-cli-tools","Choosing Exit Codes for CLI Tools",{"path":2439,"title":2440},"\u002Fadvanced-input-parsing-user-experience\u002Ferror-handling-and-exit-codes\u002Fdesigning-an-exception-hierarchy-for-a-cli","Designing an Exception Hierarchy for a Python CLI",{"path":2442,"title":2443},"\u002Fadvanced-input-parsing-user-experience\u002Ferror-handling-and-exit-codes\u002Fdid-you-mean-suggestions-for-mistyped-input","Did You Mean…? Suggestions for Mistyped CLI Input",{"path":2445,"title":2446},"\u002Fadvanced-input-parsing-user-experience\u002Ferror-handling-and-exit-codes\u002Ffriendly-error-messages-and-tracebacks","Friendly Error Messages and Tracebacks",{"path":2448,"title":2449},"\u002Fadvanced-input-parsing-user-experience\u002Ferror-handling-and-exit-codes\u002Fhandling-keyboard-interrupt-cleanly","Handling Keyboard Interrupt Cleanly",{"path":2451,"title":2452},"\u002Fadvanced-input-parsing-user-experience\u002Ferror-handling-and-exit-codes","Error Handling and Exit Codes for CLIs",{"path":2454,"title":2455},"\u002Fadvanced-input-parsing-user-experience\u002Ferror-handling-and-exit-codes\u002Freporting-machine-readable-errors-in-json-mode","Reporting Machine-Readable Errors in JSON Mode",{"path":2457,"title":2458},"\u002Fadvanced-input-parsing-user-experience\u002Ferror-handling-and-exit-codes\u002Fwriting-crash-reports-users-can-send","Writing Crash Reports Users Can Send",{"path":2460,"title":2461},"\u002Fadvanced-input-parsing-user-experience\u002Fhandling-configuration-files-env-vars\u002Fconfig-precedence-flags-env-files-defaults","Config Precedence: Flags, Env, Files, Defaults",{"path":2463,"title":2464},"\u002Fadvanced-input-parsing-user-experience\u002Fhandling-configuration-files-env-vars\u002Fdiscovering-project-config-files-by-walking-up-directories","Discovering Project Config Files by Walking Up Directories",{"path":2466,"title":2467},"\u002Fadvanced-input-parsing-user-experience\u002Fhandling-configuration-files-env-vars","Handling Config Files and Env Vars in CLIs",{"path":2469,"title":2470},"\u002Fadvanced-input-parsing-user-experience\u002Fhandling-configuration-files-env-vars\u002Floading-yaml-configs-safely-in-cli-apps","Loading YAML configs safely in CLI apps",{"path":2472,"title":2473},"\u002Fadvanced-input-parsing-user-experience\u002Fhandling-configuration-files-env-vars\u002Freading-toml-config-with-tomllib","Reading TOML Config with tomllib in Python CLIs",{"path":2475,"title":2476},"\u002Fadvanced-input-parsing-user-experience\u002Fhandling-configuration-files-env-vars\u002Ftyped-settings-with-pydantic-settings","Typed Settings with pydantic-settings in Python CLIs",{"path":2478,"title":2479},"\u002Fadvanced-input-parsing-user-experience\u002Fhandling-configuration-files-env-vars\u002Fvalidating-config-files-with-json-schema","Validating Config Files with JSON Schema in a Python CLI",{"path":2481,"title":2482},"\u002Fadvanced-input-parsing-user-experience\u002Fhandling-configuration-files-env-vars\u002Fwriting-a-config-init-and-edit-command","Writing a Config Init and Edit Command for a Python CLI",{"path":2484,"title":2485},"\u002Fadvanced-input-parsing-user-experience","Advanced Input Parsing for Python CLIs",{"path":2487,"title":2488},"\u002Fadvanced-input-parsing-user-experience\u002Finteractive-terminal-ui-with-rich\u002Fadding-progress-bars-and-spinners-to-python-clis","Progress Bars and Spinners for Python CLIs",{"path":2490,"title":2491},"\u002Fadvanced-input-parsing-user-experience\u002Finteractive-terminal-ui-with-rich\u002Fbuilding-interactive-prompts-and-menus","Building Interactive Prompts and Menus in Python CLIs",{"path":2493,"title":2494},"\u002Fadvanced-input-parsing-user-experience\u002Finteractive-terminal-ui-with-rich\u002Fbuilding-tree-views-with-rich","Building Tree Views with Rich in a Python CLI",{"path":2496,"title":2497},"\u002Fadvanced-input-parsing-user-experience\u002Finteractive-terminal-ui-with-rich","Interactive Terminal UI with Rich",{"path":2499,"title":2500},"\u002Fadvanced-input-parsing-user-experience\u002Finteractive-terminal-ui-with-rich\u002Flive-dashboards-with-rich-live","Live Dashboards with Rich Live in Python CLIs",{"path":2502,"title":2503},"\u002Fadvanced-input-parsing-user-experience\u002Finteractive-terminal-ui-with-rich\u002Frendering-markdown-and-syntax-highlighting-with-rich","Rendering Markdown and Syntax Highlighting with Rich",{"path":2505,"title":2506},"\u002Fadvanced-input-parsing-user-experience\u002Finteractive-terminal-ui-with-rich\u002Frendering-tables-and-json-with-rich","Rendering Tables and JSON with Rich",{"path":2508,"title":2509},"\u002Fadvanced-input-parsing-user-experience\u002Finteractive-terminal-ui-with-rich\u002Ftheming-rich-output-consistently","Theming Rich Output Consistently in Python CLIs",{"path":2511,"title":2512},"\u002Fadvanced-input-parsing-user-experience\u002Foutput-formats-for-data-clis\u002Fadding-a-format-flag-for-table-json-and-csv","Adding a Format Flag for Table, JSON and CSV Output",{"path":2514,"title":2515},"\u002Fadvanced-input-parsing-user-experience\u002Foutput-formats-for-data-clis\u002Fcustom-output-templates-with-a-format-string","Custom Output Templates with a Format String in Python CLIs",{"path":2517,"title":2518},"\u002Fadvanced-input-parsing-user-experience\u002Foutput-formats-for-data-clis\u002Fexporting-cli-results-to-files","Exporting CLI Results to Files from a Python CLI",{"path":2520,"title":2521},"\u002Fadvanced-input-parsing-user-experience\u002Foutput-formats-for-data-clis","Output Formats for Data-Heavy Python CLIs",{"path":2523,"title":2524},"\u002Fadvanced-input-parsing-user-experience\u002Foutput-formats-for-data-clis\u002Fselecting-fields-and-columns-from-cli-output","Selecting Fields and Columns from Python CLI Output",{"path":2526,"title":2527},"\u002Fadvanced-input-parsing-user-experience\u002Foutput-formats-for-data-clis\u002Fwriting-csv-and-tsv-output-correctly","Writing CSV and TSV Output Correctly from a Python CLI",{"path":2529,"title":2530},"\u002Fadvanced-input-parsing-user-experience\u002Fshell-completion-for-python-clis\u002Fargcomplete-for-argparse-clis","Tab Completion for argparse CLIs with argcomplete",{"path":2532,"title":2533},"\u002Fadvanced-input-parsing-user-experience\u002Fshell-completion-for-python-clis\u002Fdynamic-completion-values-from-apis-and-files","Dynamic Completion Values from APIs and Files",{"path":2535,"title":2536},"\u002Fadvanced-input-parsing-user-experience\u002Fshell-completion-for-python-clis\u002Fenabling-tab-completion-in-click-and-typer","Enabling Tab Completion in Click and Typer",{"path":2538,"title":2539},"\u002Fadvanced-input-parsing-user-experience\u002Fshell-completion-for-python-clis","Shell Completion for Python CLIs",{"path":2541,"title":2542},"\u002Fadvanced-input-parsing-user-experience\u002Fshell-completion-for-python-clis\u002Finstalling-shell-completion-for-bash-zsh-fish","Installing Shell Completion for bash, zsh, fish",{"path":2544,"title":2545},"\u002Fadvanced-input-parsing-user-experience\u002Fshell-completion-for-python-clis\u002Fshipping-completion-scripts-with-packages","Shipping Shell Completion Scripts with a Python CLI",{"path":2547,"title":2548},"\u002Fadvanced-input-parsing-user-experience\u002Fshell-completion-for-python-clis\u002Ftesting-shell-completion-in-python-clis","Testing Shell Completion in Python CLIs",{"path":2550,"title":2551},"\u002Fadvanced-input-parsing-user-experience\u002Fstructured-logging-for-cli-apps\u002Fadding-trace-ids-and-context-to-cli-logs","Adding Trace IDs and Context to Python CLI Logs",{"path":2553,"title":2554},"\u002Fadvanced-input-parsing-user-experience\u002Fstructured-logging-for-cli-apps\u002Fadding-verbose-and-quiet-logging-flags","Adding Verbose and Quiet Logging Flags",{"path":2556,"title":2557},"\u002Fadvanced-input-parsing-user-experience\u002Fstructured-logging-for-cli-apps","Structured Logging for CLI Apps",{"path":2559,"title":2560},"\u002Fadvanced-input-parsing-user-experience\u002Fstructured-logging-for-cli-apps\u002Flogging-with-structlog-in-a-cli","Logging with structlog in a Python CLI",{"path":2562,"title":2563},"\u002Fadvanced-input-parsing-user-experience\u002Fstructured-logging-for-cli-apps\u002Fseparating-logs-from-program-output","Separating Logs from Program Output in a Python CLI",{"path":2565,"title":2566},"\u002Fadvanced-input-parsing-user-experience\u002Fstructured-logging-for-cli-apps\u002Fstructured-json-logging-in-python-clis","Structured JSON Logging in Python CLIs",{"path":2568,"title":2569},"\u002Fadvanced-input-parsing-user-experience\u002Fstructured-logging-for-cli-apps\u002Fwriting-rotating-log-files-from-a-cli","Writing Rotating Log Files from a Python CLI",{"path":2571,"title":2572},"\u002Fadvanced-input-parsing-user-experience\u002Fworking-with-stdin-stdout-and-pipes\u002Fdetecting-tty-and-adapting-output","Detecting a TTY and Adapting Output",{"path":2574,"title":2575},"\u002Fadvanced-input-parsing-user-experience\u002Fworking-with-stdin-stdout-and-pipes\u002Femitting-json-output-for-scripting","Emitting JSON Output for Scripting",{"path":2577,"title":2578},"\u002Fadvanced-input-parsing-user-experience\u002Fworking-with-stdin-stdout-and-pipes\u002Fhandling-broken-pipe-and-sigpipe","Handling Broken Pipe and SIGPIPE",{"path":2580,"title":2581},"\u002Fadvanced-input-parsing-user-experience\u002Fworking-with-stdin-stdout-and-pipes","Working with stdin, stdout and Pipes",{"path":2583,"title":2584},"\u002Fadvanced-input-parsing-user-experience\u002Fworking-with-stdin-stdout-and-pipes\u002Fnull-delimited-input-and-xargs-compatibility","Null-Delimited Input and xargs Compatibility in Python CLIs",{"path":2586,"title":2587},"\u002Fadvanced-input-parsing-user-experience\u002Fworking-with-stdin-stdout-and-pipes\u002Fprocessing-large-files-and-ndjson-streams","Processing Large Files and NDJSON Streams in Python CLIs",{"path":2589,"title":2590},"\u002Fadvanced-input-parsing-user-experience\u002Fworking-with-stdin-stdout-and-pipes\u002Freading-piped-input-in-python-clis","Reading Piped Input in Python CLIs",{"path":2592,"title":2593},"\u002Fcli-runtime-systems-integration\u002Fcalling-http-apis-from-python-clis\u002Fbuilding-an-api-client-cli-with-httpx","Building an API Client CLI with httpx",{"path":2595,"title":2596},"\u002Fcli-runtime-systems-integration\u002Fcalling-http-apis-from-python-clis\u002Fdownloading-files-with-progress-in-python","Downloading Files with Progress in Python CLIs",{"path":2598,"title":2599},"\u002Fcli-runtime-systems-integration\u002Fcalling-http-apis-from-python-clis","Calling HTTP APIs from Python CLIs",{"path":2601,"title":2602},"\u002Fcli-runtime-systems-integration\u002Fcalling-http-apis-from-python-clis\u002Fmocking-http-in-cli-tests-with-respx","Mocking HTTP in Python CLI Tests with respx",{"path":2604,"title":2605},"\u002Fcli-runtime-systems-integration\u002Fcalling-http-apis-from-python-clis\u002Foauth-device-flow-login-for-clis","OAuth Device Flow Login for Python CLIs",{"path":2607,"title":2608},"\u002Fcli-runtime-systems-integration\u002Fcalling-http-apis-from-python-clis\u002Fpaginating-api-results-in-a-cli","Paginating API Results in a Python CLI",{"path":2610,"title":2611},"\u002Fcli-runtime-systems-integration\u002Fcalling-http-apis-from-python-clis\u002Fretries-and-backoff-for-cli-http-calls","Retries and Backoff for CLI HTTP Calls",{"path":2613,"title":2614},"\u002Fcli-runtime-systems-integration\u002Fcalling-http-apis-from-python-clis\u002Fuploading-files-with-multipart-and-progress","Uploading Files with Multipart and Progress in a Python CLI",{"path":2616,"title":2617},"\u002Fcli-runtime-systems-integration\u002Fconcurrency-and-async-in-python-clis\u002Fcancelling-async-tasks-on-ctrl-c","Cancelling Async Tasks on Ctrl+C in Python CLIs",{"path":2619,"title":2620},"\u002Fcli-runtime-systems-integration\u002Fconcurrency-and-async-in-python-clis","Concurrency and Async in Python CLIs",{"path":2622,"title":2623},"\u002Fcli-runtime-systems-integration\u002Fconcurrency-and-async-in-python-clis\u002Fmultiprocessing-for-cpu-bound-cli-tasks","Multiprocessing for CPU-Bound CLI Tasks",{"path":2625,"title":2626},"\u002Fcli-runtime-systems-integration\u002Fconcurrency-and-async-in-python-clis\u002Fparallelising-cli-work-with-thread-pools","Parallelising CLI Work with Thread Pools",{"path":2628,"title":2629},"\u002Fcli-runtime-systems-integration\u002Fconcurrency-and-async-in-python-clis\u002Frate-limiting-concurrent-requests-in-clis","Rate-Limiting Concurrent Requests in Python CLIs",{"path":2631,"title":2632},"\u002Fcli-runtime-systems-integration\u002Fconcurrency-and-async-in-python-clis\u002Frunning-async-code-in-typer-and-click","Running Async Code in Typer and Click",{"path":2634,"title":2635},"\u002Fcli-runtime-systems-integration\u002Fconcurrency-and-async-in-python-clis\u002Fshowing-progress-for-concurrent-tasks","Showing Progress for Concurrent Tasks in a Python CLI",{"path":2637,"title":2638},"\u002Fcli-runtime-systems-integration\u002Fconcurrency-and-async-in-python-clis\u002Fstructured-concurrency-with-taskgroups-in-clis","Structured Concurrency with TaskGroups in Python CLIs",{"path":2640,"title":2641},"\u002Fcli-runtime-systems-integration\u002Ffilesystem-paths-and-atomic-writes\u002Fcross-platform-paths-with-pathlib","Cross-Platform Paths with pathlib in CLIs",{"path":2643,"title":2644},"\u002Fcli-runtime-systems-integration\u002Ffilesystem-paths-and-atomic-writes\u002Ffile-locking-for-concurrent-cli-runs","File Locking for Concurrent CLI Runs in Python",{"path":2646,"title":2647},"\u002Fcli-runtime-systems-integration\u002Ffilesystem-paths-and-atomic-writes\u002Fhandling-file-permissions-and-umask-in-clis","Handling File Permissions and umask in Python CLIs",{"path":2649,"title":2650},"\u002Fcli-runtime-systems-integration\u002Ffilesystem-paths-and-atomic-writes","Filesystem Paths and Atomic Writes for CLIs",{"path":2652,"title":2653},"\u002Fcli-runtime-systems-integration\u002Ffilesystem-paths-and-atomic-writes\u002Fsafe-temporary-files-and-directories","Safe Temporary Files and Directories in CLIs",{"path":2655,"title":2656},"\u002Fcli-runtime-systems-integration\u002Ffilesystem-paths-and-atomic-writes\u002Fstoring-app-data-with-platformdirs","Storing CLI App Data with platformdirs",{"path":2658,"title":2659},"\u002Fcli-runtime-systems-integration\u002Ffilesystem-paths-and-atomic-writes\u002Fwalking-directory-trees-with-ignore-rules","Walking Directory Trees with Ignore Rules in a Python CLI",{"path":2661,"title":2662},"\u002Fcli-runtime-systems-integration\u002Ffilesystem-paths-and-atomic-writes\u002Fwriting-files-atomically-in-python-clis","Writing Files Atomically in Python CLIs",{"path":2664,"title":2665},"\u002Fcli-runtime-systems-integration","CLI Runtime & Systems Integration for Python",{"path":2667,"title":2668},"\u002Fcli-runtime-systems-integration\u002Flocal-state-and-sqlite-in-python-clis\u002Fcaching-http-responses-on-disk-in-a-cli","Caching HTTP Responses on Disk in a Python CLI",{"path":2670,"title":2671},"\u002Fcli-runtime-systems-integration\u002Flocal-state-and-sqlite-in-python-clis","Local State and SQLite in Python CLIs",{"path":2673,"title":2674},"\u002Fcli-runtime-systems-integration\u002Flocal-state-and-sqlite-in-python-clis\u002Fmigrating-a-cli-sqlite-schema","Migrating a CLI’s SQLite Schema Between Releases",{"path":2676,"title":2677},"\u002Fcli-runtime-systems-integration\u002Flocal-state-and-sqlite-in-python-clis\u002Frecording-and-querying-cli-run-history","Recording and Querying CLI Run History in SQLite",{"path":2679,"title":2680},"\u002Fcli-runtime-systems-integration\u002Flocal-state-and-sqlite-in-python-clis\u002Fstoring-cli-state-in-sqlite","Storing CLI State in SQLite with a Small Repository Class",{"path":2682,"title":2683},"\u002Fcli-runtime-systems-integration\u002Flong-running-and-watch-mode-clis\u002Fbuilding-a-watch-mode-with-watchfiles","Building a Watch Mode with watchfiles in Python",{"path":2685,"title":2686},"\u002Fcli-runtime-systems-integration\u002Flong-running-and-watch-mode-clis\u002Fhandling-sigterm-and-graceful-shutdown","Handling SIGTERM and Graceful Shutdown in CLIs",{"path":2688,"title":2689},"\u002Fcli-runtime-systems-integration\u002Flong-running-and-watch-mode-clis\u002Fhealth-checks-and-heartbeats-for-long-running-clis","Health Checks and Heartbeats for Long-Running CLIs",{"path":2691,"title":2692},"\u002Fcli-runtime-systems-integration\u002Flong-running-and-watch-mode-clis","Long-Running and Watch-Mode Python CLIs",{"path":2694,"title":2695},"\u002Fcli-runtime-systems-integration\u002Flong-running-and-watch-mode-clis\u002Freloading-config-on-sighup","Reloading Configuration on SIGHUP in a Python CLI",{"path":2697,"title":2698},"\u002Fcli-runtime-systems-integration\u002Flong-running-and-watch-mode-clis\u002Frunning-a-cli-as-a-systemd-service","Running a Python CLI as a systemd Service",{"path":2700,"title":2701},"\u002Fcli-runtime-systems-integration\u002Flong-running-and-watch-mode-clis\u002Frunning-a-cli-on-a-schedule-with-cron-and-systemd","Running a Python CLI on a Schedule with cron and systemd",{"path":2703,"title":2704},"\u002Fcli-runtime-systems-integration\u002Flong-running-and-watch-mode-clis\u002Fsending-cli-logs-to-journald-and-syslog","Sending Python CLI Logs to journald and syslog",{"path":2706,"title":2707},"\u002Fcli-runtime-systems-integration\u002Frunning-subprocesses-from-python-clis\u002Favoiding-shell-injection-in-python-clis","Avoiding Shell Injection in Python CLIs",{"path":2709,"title":2710},"\u002Fcli-runtime-systems-integration\u002Frunning-subprocesses-from-python-clis\u002Fcalling-external-commands-safely-with-subprocess","Calling External Commands Safely with subprocess",{"path":2712,"title":2713},"\u002Fcli-runtime-systems-integration\u002Frunning-subprocesses-from-python-clis\u002Fhandling-subprocess-timeouts-and-exit-codes","Handling Subprocess Timeouts and Exit Codes",{"path":2715,"title":2716},"\u002Fcli-runtime-systems-integration\u002Frunning-subprocesses-from-python-clis","Running Subprocesses from Python CLIs",{"path":2718,"title":2719},"\u002Fcli-runtime-systems-integration\u002Frunning-subprocesses-from-python-clis\u002Flaunching-the-users-editor-from-a-cli","Launching the User’s Editor from a Python CLI",{"path":2721,"title":2722},"\u002Fcli-runtime-systems-integration\u002Frunning-subprocesses-from-python-clis\u002Fpiping-between-subprocesses-in-python","Piping Between Subprocesses in Python Without a Shell",{"path":2724,"title":2725},"\u002Fcli-runtime-systems-integration\u002Frunning-subprocesses-from-python-clis\u002Fstreaming-subprocess-output-in-real-time","Streaming Subprocess Output in Real Time",{"path":2727,"title":2728},"\u002Fcli-runtime-systems-integration\u002Frunning-subprocesses-from-python-clis\u002Fwrapping-git-and-other-tools-from-a-python-cli","Wrapping git and Other Tools from a Python CLI",{"path":2730,"title":2731},"\u002Fcli-runtime-systems-integration\u002Fsecrets-and-credentials-in-python-clis","Secrets and Credentials in Python CLIs",{"path":2733,"title":2734},"\u002Fcli-runtime-systems-integration\u002Fsecrets-and-credentials-in-python-clis\u002Fprompting-for-passwords-securely","Prompting for Passwords Securely in Python CLIs",{"path":2736,"title":2737},"\u002Fcli-runtime-systems-integration\u002Fsecrets-and-credentials-in-python-clis\u002Freading-secrets-from-env-and-files","Reading Secrets from Env Vars and Files in CLIs",{"path":2739,"title":2740},"\u002Fcli-runtime-systems-integration\u002Fsecrets-and-credentials-in-python-clis\u002Fredacting-secrets-from-cli-output-and-logs","Redacting Secrets from CLI Output and Logs",{"path":2742,"title":2743},"\u002Fcli-runtime-systems-integration\u002Fsecrets-and-credentials-in-python-clis\u002Frefreshing-expired-tokens-automatically","Refreshing Expired Tokens Automatically in a Python CLI",{"path":2745,"title":2746},"\u002Fcli-runtime-systems-integration\u002Fsecrets-and-credentials-in-python-clis\u002Fstoring-tokens-with-keyring","Storing CLI Tokens Securely with keyring",{"path":2748,"title":2749},"\u002Fcli-runtime-systems-integration\u002Fsecrets-and-credentials-in-python-clis\u002Fsupporting-multiple-profiles-and-accounts","Supporting Multiple Profiles and Accounts in CLIs",{"path":2751,"title":2752},"\u002Fcli-runtime-systems-integration\u002Fupdate-checks-and-self-updating-clis\u002Fchecking-pypi-for-a-newer-version","Checking PyPI for a Newer Version of Your Python CLI",{"path":2754,"title":2755},"\u002Fcli-runtime-systems-integration\u002Fupdate-checks-and-self-updating-clis","Update Checks, Upgrade Commands and Telemetry for Python CLIs",{"path":2757,"title":2758},"\u002Fcli-runtime-systems-integration\u002Fupdate-checks-and-self-updating-clis\u002Fopt-in-usage-telemetry-for-python-clis","Opt-In Usage Telemetry for Python CLIs Done Responsibly",{"path":2760,"title":2761},"\u002Fcli-runtime-systems-integration\u002Fupdate-checks-and-self-updating-clis\u002Fself-upgrading-a-cli-installed-with-pipx-or-uv","Self-Upgrading a Python CLI Installed with pipx or uv",{"path":2763,"title":2764},"\u002Fcli-runtime-systems-integration\u002Fupdate-checks-and-self-updating-clis\u002Fshowing-non-blocking-update-notices","Showing Non-Blocking Update Notices in a Python CLI",{"path":2766,"title":2767},"\u002F","Python CLI Toolcraft",{"path":2769,"title":2770},"\u002Fmodern-python-cli-frameworks-architecture\u002Falternative-python-cli-frameworks\u002Fbuilding-a-cli-with-cleo","Building a Python CLI with Cleo Command Classes",{"path":2772,"title":2773},"\u002Fmodern-python-cli-frameworks-architecture\u002Falternative-python-cli-frameworks\u002Fbuilding-a-cli-with-cyclopts","Building a Type-Hinted Python CLI with Cyclopts",{"path":2775,"title":2776},"\u002Fmodern-python-cli-frameworks-architecture\u002Falternative-python-cli-frameworks","Beyond Click and Typer: Alternative Python CLI Frameworks",{"path":2778,"title":2779},"\u002Fmodern-python-cli-frameworks-architecture\u002Falternative-python-cli-frameworks\u002Fquick-clis-from-functions-with-python-fire","Quick CLIs from Functions with Python Fire",{"path":2781,"title":2782},"\u002Fmodern-python-cli-frameworks-architecture\u002Falternative-python-cli-frameworks\u002Fusage-string-driven-clis-with-docopt-ng","Usage-String Driven Python CLIs with docopt-ng",{"path":2784,"title":2785},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcli-startup-performance-and-lazy-loading\u002Favoiding-import-time-side-effects","Avoiding Import-Time Side Effects in a Python CLI",{"path":2787,"title":2788},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcli-startup-performance-and-lazy-loading\u002Fcaching-expensive-work-between-cli-runs","Caching Expensive Work Between Python CLI Runs",{"path":2790,"title":2791},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcli-startup-performance-and-lazy-loading\u002Fguarding-startup-with-import-tests","Guarding CLI Startup with Import Tests",{"path":2793,"title":2794},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcli-startup-performance-and-lazy-loading","CLI Startup Performance and Lazy Loading",{"path":2796,"title":2797},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcli-startup-performance-and-lazy-loading\u002Flazy-loading-subcommands-for-faster-startup","Lazy Loading Subcommands for Faster Startup",{"path":2799,"title":2800},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcli-startup-performance-and-lazy-loading\u002Fprofiling-python-cli-startup-time","Profiling Python CLI Startup Time",{"path":2802,"title":2803},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcli-startup-performance-and-lazy-loading\u002Freducing-cli-dependency-weight","Reducing CLI Dependency Weight",{"path":2805,"title":2806},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcommand-line-parsing-with-argparse\u002Fargparse-subparsers-for-subcommands","argparse Subparsers for Subcommands",{"path":2808,"title":2809},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcommand-line-parsing-with-argparse\u002Fargparse-vs-click-vs-typer-comparison","argparse vs Click vs Typer Compared",{"path":2811,"title":2812},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcommand-line-parsing-with-argparse\u002Fargument-groups-and-help-formatting-in-argparse","Argument Groups and Help Formatting in argparse",{"path":2814,"title":2815},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcommand-line-parsing-with-argparse","Command-Line Parsing with argparse",{"path":2817,"title":2818},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcommand-line-parsing-with-argparse\u002Fmigrating-from-argparse-to-typer","Migrating from argparse to Typer",{"path":2820,"title":2821},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcommand-line-parsing-with-argparse\u002Fmutually-exclusive-options-in-argparse","Mutually Exclusive Options in argparse",{"path":2823,"title":2824},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcommand-line-parsing-with-argparse\u002Freading-arguments-from-files-with-fromfile-prefix-chars","Reading Arguments from Files with argparse’s fromfile_prefix_chars",{"path":2826,"title":2827},"\u002Fmodern-python-cli-frameworks-architecture\u002Fcommand-line-parsing-with-argparse\u002Fwriting-custom-argparse-actions","Writing Custom argparse Actions in Python",{"path":2829,"title":2830},"\u002Fmodern-python-cli-frameworks-architecture\u002Fdesigning-cli-interfaces-and-conventions\u002Fadding-dry-run-and-confirmation-to-destructive-commands","Adding Dry-Run and Confirmation to Destructive Commands",{"path":2832,"title":2833},"\u002Fmodern-python-cli-frameworks-architecture\u002Fdesigning-cli-interfaces-and-conventions\u002Fdesigning-idempotent-commands","Designing Idempotent Commands in a Python CLI",{"path":2835,"title":2836},"\u002Fmodern-python-cli-frameworks-architecture\u002Fdesigning-cli-interfaces-and-conventions\u002Ffollowing-posix-and-gnu-argument-conventions","Following POSIX and GNU Argument Conventions in Python",{"path":2838,"title":2839},"\u002Fmodern-python-cli-frameworks-architecture\u002Fdesigning-cli-interfaces-and-conventions\u002Fglobal-options-vs-per-command-options","Global Options vs Per-Command Options in Python CLIs",{"path":2841,"title":2842},"\u002Fmodern-python-cli-frameworks-architecture\u002Fdesigning-cli-interfaces-and-conventions","Designing CLI Interfaces and Conventions in Python",{"path":2844,"title":2845},"\u002Fmodern-python-cli-frameworks-architecture\u002Fdesigning-cli-interfaces-and-conventions\u002Fnaming-commands-and-flags-consistently","Naming Commands and Flags Consistently in Python CLIs",{"path":2847,"title":2848},"\u002Fmodern-python-cli-frameworks-architecture\u002Fdesigning-cli-interfaces-and-conventions\u002Fpositional-arguments-vs-options","Positional Arguments vs Options: Designing a CLI Signature",{"path":2850,"title":2851},"\u002Fmodern-python-cli-frameworks-architecture","Python CLI Frameworks and Architecture",{"path":2853,"title":2854},"\u002Fmodern-python-cli-frameworks-architecture\u002Fplugin-architectures-for-extensible-clis\u002Fdiscovering-plugins-with-entry-points","Discovering Plugins with Entry Points in Python CLIs",{"path":2856,"title":2857},"\u002Fmodern-python-cli-frameworks-architecture\u002Fplugin-architectures-for-extensible-clis\u002Fhook-based-plugins-with-pluggy","Hook-Based Plugins for Python CLIs with pluggy",{"path":2859,"title":2860},"\u002Fmodern-python-cli-frameworks-architecture\u002Fplugin-architectures-for-extensible-clis","Plugin Architectures for Extensible CLIs",{"path":2862,"title":2863},"\u002Fmodern-python-cli-frameworks-architecture\u002Fplugin-architectures-for-extensible-clis\u002Fisolating-plugin-failures","Isolating Plugin Failures in an Extensible Python CLI",{"path":2865,"title":2866},"\u002Fmodern-python-cli-frameworks-architecture\u002Fplugin-architectures-for-extensible-clis\u002Ftesting-plugins-against-the-host-cli","Testing Plugins Against the Host CLI",{"path":2868,"title":2869},"\u002Fmodern-python-cli-frameworks-architecture\u002Fplugin-architectures-for-extensible-clis\u002Fversioning-a-plugin-api","Versioning a Plugin API for a Python CLI",{"path":2871,"title":2872},"\u002Fmodern-python-cli-frameworks-architecture\u002Fplugin-architectures-for-extensible-clis\u002Fwriting-a-plugin-for-an-existing-cli","Writing a Plugin for an Existing CLI",{"path":2874,"title":2875},"\u002Fmodern-python-cli-frameworks-architecture\u002Fstructuring-multi-command-python-clis\u002Fbest-practices-for-python-cli-entry-points","Best practices for Python CLI entry points",{"path":2877,"title":2878},"\u002Fmodern-python-cli-frameworks-architecture\u002Fstructuring-multi-command-python-clis\u002Fdependency-injection-patterns-for-cli-commands","Dependency Injection Patterns for CLI Commands",{"path":2880,"title":2881},"\u002Fmodern-python-cli-frameworks-architecture\u002Fstructuring-multi-command-python-clis\u002Fhow-to-structure-a-large-python-cli-project","Structuring a Large Python CLI Project",{"path":2883,"title":2884},"\u002Fmodern-python-cli-frameworks-architecture\u002Fstructuring-multi-command-python-clis","Structuring Multi-Command Python CLIs",{"path":2886,"title":2887},"\u002Fmodern-python-cli-frameworks-architecture\u002Fstructuring-multi-command-python-clis\u002Foffering-a-python-api-alongside-your-cli","Offering a Python API Alongside Your CLI",{"path":2889,"title":2890},"\u002Fmodern-python-cli-frameworks-architecture\u002Fstructuring-multi-command-python-clis\u002Fregistering-commands-from-modules-automatically","Registering CLI Commands from Modules Automatically",{"path":2892,"title":2893},"\u002Fmodern-python-cli-frameworks-architecture\u002Fstructuring-multi-command-python-clis\u002Fsharing-common-options-across-commands","Sharing Common Options Across Python CLI Commands",{"path":2895,"title":2896},"\u002Fmodern-python-cli-frameworks-architecture\u002Fstructuring-multi-command-python-clis\u002Fsharing-state-with-click-context-objects","Sharing State with Click Context Objects",{"path":2898,"title":2899},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Fend-to-end-testing-an-installed-cli","End-to-End Testing an Installed Python CLI",{"path":2901,"title":2902},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications","Testing Python CLI Applications",{"path":2904,"title":2905},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Fmeasuring-cli-test-coverage","Measuring CLI Test Coverage",{"path":2907,"title":2908},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Fmocking-filesystem-and-network-in-cli-tests","Mocking the Filesystem and Network in CLI Tests",{"path":2910,"title":2911},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Fproperty-based-testing-cli-arguments-with-hypothesis","Property-Based Testing CLI Arguments with Hypothesis",{"path":2913,"title":2914},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Fsnapshot-testing-cli-output","Snapshot Testing CLI Output",{"path":2916,"title":2917},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Ftesting-click-commands-with-clirunner","Testing Click Commands with CliRunner",{"path":2919,"title":2920},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Ftesting-commands-that-call-subprocesses","Testing Python CLI Commands That Call Subprocesses",{"path":2922,"title":2923},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Ftesting-interactive-prompts-and-stdin","Testing Interactive Prompts and stdin",{"path":2925,"title":2926},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftesting-python-cli-applications\u002Ftranscript-tests-for-cli-commands","Transcript Tests for Python CLI Commands",{"path":2928,"title":2929},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each\u002Fbuilding-a-cli-with-subcommands-in-click","Building a CLI with subcommands in Click",{"path":2931,"title":2932},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each\u002Fbuilding-dynamic-commands-in-click","Building Dynamic Commands in Click",{"path":2934,"title":2935},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each\u002Fchoices-and-enums-in-typer-and-click","Choices and Enums in Typer and Click Options",{"path":2937,"title":2938},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each\u002Fclick-option-callbacks-and-eager-options","Click Option Callbacks and Eager Options Explained",{"path":2940,"title":2941},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each\u002Fconverting-a-click-app-to-typer","Converting a Click App to Typer",{"path":2943,"title":2944},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each","Typer vs Click: When to Use Each",{"path":2946,"title":2947},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each\u002Frich-markup-and-help-panels-in-typer","Rich Markup and Help Panels in Typer",{"path":2949,"title":2950},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each\u002Ftyper-callback-functions-explained","Typer callback functions explained",{"path":2952,"title":2953},"\u002Fmodern-python-cli-frameworks-architecture\u002Ftyper-vs-click-when-to-use-each\u002Fusing-annotated-options-in-typer","Using Annotated Options in Typer",{"path":2955,"title":2956},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Fautomating-releases-from-git-tags","Automating Python CLI Releases from Git Tags",{"path":2958,"title":2959},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Fcaching-uv-dependencies-in-ci","Caching uv Dependencies in CI for Python CLIs",{"path":2961,"title":2962},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis","CI\u002FCD Pipelines for Python CLIs",{"path":2964,"title":2965},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Fpublishing-a-cli-docker-image-from-ci","Publishing a Python CLI as a Docker Image from CI",{"path":2967,"title":2968},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Fpublishing-to-pypi-with-trusted-publishing","Publishing a CLI to PyPI with Trusted Publishing",{"path":2970,"title":2971},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Frunning-cli-tests-on-windows-and-macos-runners","Running Python CLI Tests on Windows and macOS Runners",{"path":2973,"title":2974},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Fsmoke-testing-the-built-wheel-in-ci","Smoke-Testing the Built Wheel of a Python CLI in CI",{"path":2976,"title":2977},"\u002Fproject-setup-dependency-management\u002Fci-cd-pipelines-for-python-clis\u002Ftesting-a-cli-across-python-versions-with-github-actions","Testing a CLI Across Python Versions in GitHub Actions",{"path":2979,"title":2980},"\u002Fproject-setup-dependency-management\u002Fcli-project-scaffolding-with-cookiecutter\u002Fbuilding-a-cookiecutter-template-for-typer-clis","Building a Cookiecutter Template for Typer CLIs",{"path":2982,"title":2983},"\u002Fproject-setup-dependency-management\u002Fcli-project-scaffolding-with-cookiecutter\u002Fcopier-vs-cookiecutter-for-cli-templates","Copier vs Cookiecutter for CLI Templates",{"path":2985,"title":2986},"\u002Fproject-setup-dependency-management\u002Fcli-project-scaffolding-with-cookiecutter","CLI Project Scaffolding with Cookiecutter",{"path":2988,"title":2989},"\u002Fproject-setup-dependency-management\u002Fcli-project-scaffolding-with-cookiecutter\u002Fpost-generation-hooks-in-cli-templates","Post-Generation Hooks in Python CLI Templates",{"path":2991,"title":2992},"\u002Fproject-setup-dependency-management\u002Fcli-project-scaffolding-with-cookiecutter\u002Ftemplate-variables-and-conditional-files","Template Variables and Conditional Files in CLI Templates",{"path":2994,"title":2995},"\u002Fproject-setup-dependency-management\u002Fcli-project-scaffolding-with-cookiecutter\u002Ftesting-a-project-template-with-pytest","Testing a CLI Project Template with pytest",{"path":2997,"title":2998},"\u002Fproject-setup-dependency-management\u002Fcli-project-scaffolding-with-cookiecutter\u002Fupdating-generated-projects-with-copier-update","Updating Generated CLI Projects with copier update",{"path":3000,"title":3001},"\u002Fproject-setup-dependency-management\u002Fdistributing-clis-as-standalone-binaries\u002Fbuilding-cross-platform-release-binaries-in-ci","Building Cross-Platform Release Binaries in CI",{"path":3003,"title":3004},"\u002Fproject-setup-dependency-management\u002Fdistributing-clis-as-standalone-binaries\u002Fbundling-a-python-cli-with-pyinstaller","Bundling a Python CLI with PyInstaller",{"path":3006,"title":3007},"\u002Fproject-setup-dependency-management\u002Fdistributing-clis-as-standalone-binaries\u002Fcode-signing-and-notarizing-cli-binaries","Code Signing and Notarizing Python CLI Binaries",{"path":3009,"title":3010},"\u002Fproject-setup-dependency-management\u002Fdistributing-clis-as-standalone-binaries\u002Fhomebrew-and-scoop-packaging-for-python-clis","Homebrew and Scoop Packaging for Python CLIs",{"path":3012,"title":3013},"\u002Fproject-setup-dependency-management\u002Fdistributing-clis-as-standalone-binaries","Distributing CLIs as Standalone Binaries",{"path":3015,"title":3016},"\u002Fproject-setup-dependency-management\u002Fdistributing-clis-as-standalone-binaries\u002Fnuitka-vs-pyinstaller-for-python-clis","Nuitka vs PyInstaller for Python CLI Binaries",{"path":3018,"title":3019},"\u002Fproject-setup-dependency-management\u002Fdistributing-clis-as-standalone-binaries\u002Freducing-pyinstaller-binary-size","Reducing the Size of a PyInstaller CLI Binary",{"path":3021,"title":3022},"\u002Fproject-setup-dependency-management\u002Fdistributing-clis-as-standalone-binaries\u002Fshipping-a-cli-as-a-zipapp-with-shiv","Shipping a CLI as a Zipapp with shiv",{"path":3024,"title":3025},"\u002Fproject-setup-dependency-management","Project Setup & Dependency Management",{"path":3027,"title":3028},"\u002Fproject-setup-dependency-management\u002Flinting-and-type-checking-cli-code\u002Fconfiguring-ruff-for-a-cli-project","Configuring Ruff for a Python CLI Project",{"path":3030,"title":3031},"\u002Fproject-setup-dependency-management\u002Flinting-and-type-checking-cli-code\u002Fenforcing-import-boundaries-in-a-cli-codebase","Enforcing Import Boundaries in a Python CLI Codebase",{"path":3033,"title":3034},"\u002Fproject-setup-dependency-management\u002Flinting-and-type-checking-cli-code\u002Ffinding-unused-code-and-dependencies-with-vulture-and-deptry","Finding Unused Code and Dependencies with vulture and deptry",{"path":3036,"title":3037},"\u002Fproject-setup-dependency-management\u002Flinting-and-type-checking-cli-code","Linting and Type-Checking Python CLI Code",{"path":3039,"title":3040},"\u002Fproject-setup-dependency-management\u002Flinting-and-type-checking-cli-code\u002Frunning-pyright-in-strict-mode-on-a-cli","Running Pyright in Strict Mode on a Python CLI",{"path":3042,"title":3043},"\u002Fproject-setup-dependency-management\u002Flinting-and-type-checking-cli-code\u002Frunning-ruff-and-mypy-in-ci-with-annotations","Running Ruff and mypy in CI with Inline Annotations",{"path":3045,"title":3046},"\u002Fproject-setup-dependency-management\u002Flinting-and-type-checking-cli-code\u002Ftype-checking-click-and-typer-code-with-mypy","Type-Checking Click and Typer Code with mypy",{"path":3048,"title":3049},"\u002Fproject-setup-dependency-management\u002Fmanaging-cli-versioning-changelogs\u002Fautomating-changelogs-with-conventional-commits","Automating Changelogs with Conventional Commits",{"path":3051,"title":3052},"\u002Fproject-setup-dependency-management\u002Fmanaging-cli-versioning-changelogs\u002Fbumping-versions-consistently-across-a-cli-project","Bumping Versions Consistently Across a Python CLI Project",{"path":3054,"title":3055},"\u002Fproject-setup-dependency-management\u002Fmanaging-cli-versioning-changelogs\u002Fderiving-versions-from-git-tags-with-hatch-vcs","Deriving CLI Versions from Git Tags with hatch-vcs",{"path":3057,"title":3058},"\u002Fproject-setup-dependency-management\u002Fmanaging-cli-versioning-changelogs\u002Fexposing-version-info-and-build-metadata","Exposing Version Info and Build Metadata",{"path":3060,"title":3061},"\u002Fproject-setup-dependency-management\u002Fmanaging-cli-versioning-changelogs","Managing CLI Versioning & Changelogs",{"path":3063,"title":3064},"\u002Fproject-setup-dependency-management\u002Fmanaging-cli-versioning-changelogs\u002Fsemantic-versioning-policy-for-cli-tools","A Semantic Versioning Policy for CLI Tools",{"path":3066,"title":3067},"\u002Fproject-setup-dependency-management\u002Fmanaging-cli-versioning-changelogs\u002Fshipping-pre-releases-and-release-candidates","Shipping Pre-Releases and Release Candidates of a Python CLI",{"path":3069,"title":3070},"\u002Fproject-setup-dependency-management\u002Fpackaging-python-clis-for-distribution\u002Fbuilding-wheels-and-sdists-for-python-clis","Building Wheels and sdists for Python CLIs",{"path":3072,"title":3073},"\u002Fproject-setup-dependency-management\u002Fpackaging-python-clis-for-distribution\u002Fbundling-data-files-with-importlib-resources","Bundling Data Files with importlib.resources in CLIs",{"path":3075,"title":3076},"\u002Fproject-setup-dependency-management\u002Fpackaging-python-clis-for-distribution\u002Fchoosing-a-build-backend-for-a-python-cli","Choosing a Build Backend for a Python CLI",{"path":3078,"title":3079},"\u002Fproject-setup-dependency-management\u002Fpackaging-python-clis-for-distribution","Packaging Python CLIs for Distribution",{"path":3081,"title":3082},"\u002Fproject-setup-dependency-management\u002Fpackaging-python-clis-for-distribution\u002Finstalling-and-distributing-clis-with-pipx","Installing and Distributing CLIs with pipx",{"path":3084,"title":3085},"\u002Fproject-setup-dependency-management\u002Fpackaging-python-clis-for-distribution\u002Foptional-dependencies-and-extras-for-clis","Optional Dependencies and Extras for Python CLIs",{"path":3087,"title":3088},"\u002Fproject-setup-dependency-management\u002Fpackaging-python-clis-for-distribution\u002Fpublishing-a-python-cli-to-pypi","Publishing a Python CLI to PyPI",{"path":3090,"title":3091},"\u002Fproject-setup-dependency-management\u002Fpackaging-python-clis-for-distribution\u002Fwriting-pyproject-toml-metadata-for-a-cli","Writing pyproject.toml Metadata for a Python CLI",{"path":3093,"title":3094},"\u002Fproject-setup-dependency-management\u002Fpoetry-workflows-for-cli-development\u002Fdynamic-versioning-with-poetry-plugins","Dynamic Versioning for a Poetry CLI from Git Tags",{"path":3096,"title":3097},"\u002Fproject-setup-dependency-management\u002Fpoetry-workflows-for-cli-development","Poetry Workflows for CLI Development",{"path":3099,"title":3100},"\u002Fproject-setup-dependency-management\u002Fpoetry-workflows-for-cli-development\u002Fmanaging-poetry-lock-files-for-cli-tools","Managing Poetry Lock Files for CLI Tools",{"path":3102,"title":3103},"\u002Fproject-setup-dependency-management\u002Fpoetry-workflows-for-cli-development\u002Fmigrating-a-cli-from-poetry-to-uv","Migrating a Python CLI from Poetry to uv",{"path":3105,"title":3106},"\u002Fproject-setup-dependency-management\u002Fpoetry-workflows-for-cli-development\u002Fpoetry-dependency-groups-for-cli-tooling","Poetry Dependency Groups for CLI Tooling",{"path":3108,"title":3109},"\u002Fproject-setup-dependency-management\u002Fpoetry-workflows-for-cli-development\u002Fpoetry-entry-points-and-scripts-for-clis","Poetry Entry Points and Scripts for CLIs",{"path":3111,"title":3112},"\u002Fproject-setup-dependency-management\u002Fpoetry-workflows-for-cli-development\u002Fpublishing-a-cli-with-poetry","Building and Publishing a Python CLI with Poetry",{"path":3114,"title":3115},"\u002Fproject-setup-dependency-management\u002Fpre-commit-hooks-for-cli-projects","Pre-commit Hooks for CLI Projects",{"path":3117,"title":3118},"\u002Fproject-setup-dependency-management\u002Fpre-commit-hooks-for-cli-projects\u002Fkeeping-hook-versions-current-with-autoupdate","Keeping pre-commit Hook Versions Current with autoupdate",{"path":3120,"title":3121},"\u002Fproject-setup-dependency-management\u002Fpre-commit-hooks-for-cli-projects\u002Frunning-pre-commit-in-ci","Running pre-commit in CI for a Python CLI Repository",{"path":3123,"title":2310},"\u002Fproject-setup-dependency-management\u002Fpre-commit-hooks-for-cli-projects\u002Fsetting-up-pre-commit-for-python-cli-repos",{"path":3125,"title":3126},"\u002Fproject-setup-dependency-management\u002Fpre-commit-hooks-for-cli-projects\u002Fshipping-your-cli-as-a-pre-commit-hook","Shipping Your Python CLI as a pre-commit Hook",{"path":3128,"title":3129},"\u002Fproject-setup-dependency-management\u002Fpre-commit-hooks-for-cli-projects\u002Fspeeding-up-slow-pre-commit-hooks","Speeding Up Slow pre-commit Hooks in a CLI Repository",{"path":3131,"title":3132},"\u002Fproject-setup-dependency-management\u002Fpre-commit-hooks-for-cli-projects\u002Fwriting-local-pre-commit-hooks-in-python","Writing Local pre-commit Hooks in Python",{"path":2339,"title":5},{"path":3135,"title":3136},"\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fgenerating-an-sbom-for-a-python-cli","Generating an SBOM for a Python CLI Release",{"path":3138,"title":3139},"\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain","Securing the Supply Chain of a Python CLI",{"path":3141,"title":3142},"\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fpinning-dependencies-with-hashes","Pinning a Python CLI’s Dependencies with Hashes",{"path":3144,"title":3145},"\u002Fproject-setup-dependency-management\u002Fsecuring-a-python-cli-supply-chain\u002Fpublishing-attestations-and-verifying-releases","Publishing Attestations and Verifying Python CLI Releases",{"path":3147,"title":3148},"\u002Fproject-setup-dependency-management\u002Fuv-for-python-cli-dependency-management\u002Fbuilding-and-publishing-a-cli-with-uv","Building and Publishing a Python CLI with uv",{"path":3150,"title":3151},"\u002Fproject-setup-dependency-management\u002Fuv-for-python-cli-dependency-management","uv for Python CLI Dependency Management",{"path":3153,"title":3154},"\u002Fproject-setup-dependency-management\u002Fuv-for-python-cli-dependency-management\u002Flocking-and-syncing-cli-dependencies-with-uv","Locking and Syncing a Python CLI’s Dependencies with uv",{"path":3156,"title":3157},"\u002Fproject-setup-dependency-management\u002Fuv-for-python-cli-dependency-management\u002Frunning-one-off-cli-scripts-with-uv-run","Running One-Off CLI Scripts with uv run and PEP 723",{"path":3159,"title":3160},"\u002Fproject-setup-dependency-management\u002Fuv-for-python-cli-dependency-management\u002Fusing-private-package-indexes-with-uv","Using Private Package Indexes with uv for Internal CLIs",{"path":3162,"title":3163},"\u002Fproject-setup-dependency-management\u002Fuv-for-python-cli-dependency-management\u002Fuv-init-vs-poetry-init-for-cli-tools","uv init vs poetry init for CLI tools",{"path":3165,"title":3166},"\u002Fproject-setup-dependency-management\u002Fuv-for-python-cli-dependency-management\u002Fuv-tool-install-vs-pipx-for-clis","uv tool install vs pipx for CLIs",{"path":3168,"title":3169},"\u002Fproject-setup-dependency-management\u002Fuv-for-python-cli-dependency-management\u002Fuv-workspaces-for-multi-package-clis","uv Workspaces for Multi-Package Python CLIs",{"path":3171,"title":3172},"\u002Fproject-setup-dependency-management\u002Fvirtual-environments-isolation-best-practices\u002Fdebugging-wrong-python-and-wrong-venv-problems","Debugging Wrong-Python and Wrong-Venv Problems in CLIs",{"path":3174,"title":3175},"\u002Fproject-setup-dependency-management\u002Fvirtual-environments-isolation-best-practices\u002Fexternally-managed-environments-and-pep-668","PEP 668 and Python CLIs: the externally-managed-environment Error",{"path":3177,"title":3178},"\u002Fproject-setup-dependency-management\u002Fvirtual-environments-isolation-best-practices","Python CLI Env Isolation Best Practices",{"path":3180,"title":3181},"\u002Fproject-setup-dependency-management\u002Fvirtual-environments-isolation-best-practices\u002Fisolating-cli-tools-from-project-dependencies","Isolating CLI Tools from Your Project’s Dependencies",{"path":3183,"title":3184},"\u002Fproject-setup-dependency-management\u002Fvirtual-environments-isolation-best-practices\u002Fmanaging-virtual-environments-for-cross-platform-clis","Managing Python CLI Virtual Environments",{"path":3186,"title":3187},"\u002Fproject-setup-dependency-management\u002Fvirtual-environments-isolation-best-practices\u002Fpinning-the-python-version-for-a-cli","Pinning the Python Version for a CLI",{"path":3189,"title":3190},"\u002Fproject-setup-dependency-management\u002Fvirtual-environments-isolation-best-practices\u002Fsupporting-multiple-python-versions-with-nox","Supporting Multiple Python Versions with nox",1790967543026]