ca9 is an open-source Python package for security analysis and evidence-backed SCA (Software Composition Analysis) triage. It scans dependencies for known vulnerabilities, provides actionable evidence, and helps prioritize fixes. Version 0.4.0, released on PyPI, requires Python >=3.10. Release cadence is irregular.
pip install ca9No compatibility data collected yet for this library.
Verified import paths — ran on the pinned version, not inferred.
Quickstart: import ca9 and call scan() on the project directory. Results include vulnerability details with evidence.
Ensure you pass a valid project directory containing a requirements.txt or pyproject.toml.
Replace `ca9.triage(path)` with `ca9.scan(path, triage=True)`.
Use ca9.scan(path, triage=True) instead.
Set the CA9_API_KEY environment variable or pass api_key='your_key' explicitly.
No dependency data recorded yet.