aibom-generator/pyproject.toml at 2213b60e585e7d0dbf380406165132637c18258b · GenAI-Security-Project/aibom-generator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102

[project]
name = "owasp-aibom-generator"
version = "1.0.2"
description = "A comprehensive AI Bill of Materials (AIBOM) generation tool for Hugging Face models."
authors = [
    { name = "OWASP GenAI Security Project", email = "genai-security@owasp.org" }
]
readme = "README.md"
requires-python = ">=3.11"
license = { text = "Apache-2.0" }
classifiers = [
    "Programming Language :: Python :: 3",
    "License :: OSI Approved :: Apache Software License",
    "Operating System :: OS Independent",
    "Topic :: Security",
    "Topic :: Scientific/Engineering :: Artificial Intelligence"
]
dependencies = [
    "beautifulsoup4>=4.11.0",
    "datasets>=2.0.0",
    "fastapi>=0.104.0",
    "flask>=2.3.0",
    "gunicorn>=21.2.0",
    "httpx>=0.25.0",
    "huggingface_hub>=0.19.0",
    "jinja2>=3.0.0",
    "jsonschema>=4.17.0",
    "license-expression>=30.4.4",
    "packageurl-python>=0.11.1",
    "pydantic>=2.4.0",
    "python-multipart",
    "PyYAML>=6.0.1",
    "requests>=2.31.0",
    "sentencepiece>=0.1.99",
    "torch>=2.0.0",
    "transformers>=4.36.0",
    "uvicorn>=0.24.0",
]

[project.optional-dependencies]
dev = [
    "pytest>=7.0.0",
    "pytest-cov>=4.0.0",
    "pytest-mock>=3.10.0",
    "ruff",
    "gguf>=0.6.0",
    "pre-commit>=3.0.0",
    "bandit[toml]>=1.7.0"
]

[project.scripts]
aibom = "src.cli:main"

[build-system]
requires = ["setuptools>=61.0", "wheel"]
build-backend = "setuptools.build_meta"

[tool.setuptools.packages.find]
where = ["."]
include = ["src*"]
namespaces = false

[tool.pytest.ini_options]
minversion = "6.0"
addopts = "-ra -q --cov=src"
testpaths = [
    "tests",
]
pythonpath = [
    "."
]

[tool.ruff]
target-version = "py311"
line-length = 120
src = ["src", "tests"]

[tool.ruff.lint]
select = [
    "E",    # pycodestyle errors
    "W",    # pycodestyle warnings
    "F",    # pyflakes
    "I",    # isort
    "B",    # flake8-bugbear
    "UP",   # pyupgrade
]
ignore = [
    "E501",  # line too long (handled by formatter)
]

[tool.ruff.lint.isort]
known-first-party = ["src"]

[tool.bandit]
exclude_dirs = ["tests"]
skips = ["B101"]  # allow assert in tests

[dependency-groups]
dev = [
    "gguf>=0.6.0",
]