Glossary: Vulnerability, Asset and Change Management

pip-audit

Also written: --no-deps, --disable-pip

A tool that checks the Python libraries in a lockfile against the advisory database through PyPI. It found six real flaws in four of the shop's libraries.