Skip to content

This package implements a test for Dependency Confusion using pip.

License

Notifications You must be signed in to change notification settings

mauricelambert/DependencyConfusion

Repository files navigation

DependencyConfusion

Description

This package implements a test for Dependency Confusion using pip.

  1. The version 0.0.2 is available on test.pypi.org.
  2. The version 0.0.2 and 666 are available on pypi.org.
  3. In the scenario you want to install version 0.0.2 available on test.pypi.org and you use the pip --extra-index-url option to install it.
  4. During installation, a window will open to tell you which version is being installed... theoretically version 666 available on pypi.org will be installed if your pip version is vulnerable to dependency confusion.

Requirements

This package require:

  • python3
  • python3 Standard Library

Installation

pip install --extra-index-url https://test.pypi.org/simple/ DependencyConfusion

Links

Licence

Licensed under the GPL, version 3.

Releases

No releases published

Packages

No packages published

Languages