LoopyLuci Dependency Audit
Check for Vulnerabilities
# pip-audit
pip install pip-audit
pip-audit
# Safety
pip install safety
safety check
# pip freeze comparison
pip freeze | safety check --stdin
Check for Outdated Packages
pip list --outdated
# pip-upgrader
pip install pip-upgrader
pip-upgrade
License Checking
pip install pip-licenses
pip-licenses
pip-licenses --summary
pip-licenses --allow-only "MIT;Apache-2.0"
requirements.txt Hygiene
# Generate from installed
pip freeze > requirements.txt
# Generate with hashes (secure)
pip freeze --require-hashes > requirements.txt
# Compile from setup.cfg/pyproject.toml
pip install pip-tools
pip-compile pyproject.toml
Automated Audit (Cron)
hermes cron create \
--schedule "0 9 * * 1" \
--script "scripts/dep-audit.sh" \
--no-agent \
--deliver telegram
Script outputs only when issues found (empty = silent).