Audit Python environments and requirements files for known vulnerabilities with pip-audit

Check Python environments and requirements files for published vulnerabilities before shipping, upgrading, or approving dependency changes.

Prerequisites

Python 3.9+, pip, pip-audit

Installation

Use the upstream install or setup path that matches your environment:

• pip-audit
• pip-audit is a tool for scanning Python environments for packages
• pip-audit requires Python 3.10 or newer, and can be installed directly via pip:
• python -m pip install pip-audit

Requirements and caveats from upstream:

• 
• with known vulnerabilities. It uses the Python Packaging Advisory Database
• 

Basic usage or getting-started notes:

• Usage

• bash

• Third-party packages

• Source: https://github.com/pypa/pip-audit

• Extracted from upstream docs: https://raw.githubusercontent.com/pypa/pip-audit/HEAD/README.md

Documentation

• https://pypa.github.io/pip-audit/

Source

• Agent Skill Exchange