21 Commits

Author SHA1 Message Date
43f36b60fb feat: add comprehensive security, license, health, and requirements analysis tools
Some checks are pending
Bump version / Bump version and create changelog with commitizen (push) Waiting to run
Tests / test (macos-latest, 3.10) (push) Waiting to run
Tests / test (macos-latest, 3.11) (push) Waiting to run
Tests / test (macos-latest, 3.12) (push) Waiting to run
Tests / test (ubuntu-latest, 3.10) (push) Waiting to run
Tests / test (ubuntu-latest, 3.11) (push) Waiting to run
Tests / test (ubuntu-latest, 3.12) (push) Waiting to run
Tests / test (windows-latest, 3.10) (push) Waiting to run
Tests / test (windows-latest, 3.11) (push) Waiting to run
Tests / test (windows-latest, 3.12) (push) Waiting to run
Tests / security (push) Waiting to run
- Add security vulnerability scanning with OSV and GitHub advisories integration
- Add license compatibility analysis with SPDX normalization and risk assessment
- Add package health scoring across 7 categories with GitHub metrics integration
- Add requirements file analysis supporting multiple formats (requirements.txt, pyproject.toml, etc.)
- Fix search functionality MCP wrapper and error handling
- Fix Python compatibility checking parameter order issue
- Fix package recommendations NoneType handling
- Add 8 new MCP tool endpoints for enhanced analysis capabilities

This brings the total to 37 comprehensive MCP tools across 8 categories for complete PyPI package analysis and management.
2025-09-06 10:28:57 -06:00
8b43927493 chore: upgrade all Python packages and fix linting issues
- Update all dependencies to latest versions (fastmcp, httpx, packaging, etc.)
- Downgrade click from yanked 8.2.2 to stable 8.1.7
- Fix code formatting and linting issues with ruff
- Most tests passing (2 test failures in dependency resolver need investigation)
2025-08-15 20:23:14 -06:00
renovate[bot]
ab88b75703 fix(deps): update dependency fastmcp to v2.11.0 2025-08-02 15:11:40 +08:00
renovate[bot]
f52df0c3d2 chore(deps): update dependency ruff to ^0.12.0 2025-08-02 15:11:28 +08:00
renovate[bot]
f7e38c599a fix(deps): update dependency click to v8.2.2 2025-08-02 15:11:16 +08:00
renovate[bot]
8d175ac4ec fix(deps): update dependency pydantic to v2.11.7 2025-07-14 01:07:17 +08:00
dependabot[bot]
a10948e886 chore(deps): bump mcp from 1.9.4 to 1.10.0
Bumps [mcp](https://github.com/modelcontextprotocol/python-sdk) from 1.9.4 to 1.10.0.
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.9.4...v1.10.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 1.10.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-14 01:06:46 +08:00
renovate[bot]
452be24e90 fix(deps): update dependency fastmcp to v2.9.0 2025-06-26 00:12:46 +08:00
renovate[bot]
3c387c00c4 fix(deps): update dependency pydantic-settings to v2.10.1 2025-06-26 00:12:31 +08:00
renovate[bot]
63ef17f0ac chore(deps): update dependency pytest-cov to v6 2025-05-30 03:19:56 +08:00
renovate[bot]
798cf0e5de chore(deps): update dependency ruff to v0.11.12 2025-05-30 03:19:35 +08:00
renovate[bot]
ed0cf45c18 chore(deps): update dependency pre-commit to v4 2025-05-28 00:33:29 +08:00
renovate[bot]
458481f8c0 chore(deps): update dependency ruff to ^0.11.0 2025-05-28 00:27:01 +08:00
renovate[bot]
1725df0ca1 fix(deps): update dependency fastmcp to v2 2025-05-27 21:22:53 +08:00
longhao
a0c507c3ff feat: implement comprehensive configuration management system with multi-mirror support
- Add ServerSettings class with pydantic-settings for type-safe configuration
- Support multiple PyPI mirror sources with priority-based fallback mechanism
- Implement RepositoryConfig and RepositoryManager for multi-repository support
- Add environment variable support for all configuration options
- Include private repository authentication configuration
- Add advanced dependency analysis settings (max depth, concurrency, security)
- Provide secure credential management with sensitive data masking
- Update documentation and configuration examples
- Add comprehensive test suite with 23 test cases covering all features
- Include demo script showcasing multi-mirror configuration capabilities

Configuration features:
- Primary, additional, and fallback index URLs
- Automatic duplicate URL removal with priority preservation
- Runtime configuration reloading
- Integration with repository manager for seamless multi-source queries

Signed-off-by: longhao <hal.long@outlook.com>
2025-05-27 17:41:42 +08:00
longhao
ba8536f718 feat: add commitizen configuration for automated version management
- Add commitizen to dev dependencies for semantic versioning
- Configure commitizen with conventional commits and poetry integration
- Set up automatic changelog generation and PEP440 version scheme
- Enable major version zero mode for pre-1.0 releases
- Update poetry.lock with new commitizen dependency

Signed-off-by: longhao <hal.long@outlook.com>
2025-05-27 14:51:58 +08:00
renovate[bot]
c28da94f9c fix(deps): update dependency fastmcp to ^0.4.0 2025-05-27 14:35:11 +08:00
renovate[bot]
af4040916c fix(deps): update dependency httpx to ^0.28.0 2025-05-27 13:51:44 +08:00
renovate[bot]
aba43d995d chore(deps): update dependency nox to v2025 2025-05-27 13:49:08 +08:00
longhao
d146e5d775 fix: update poetry.lock after removing mypy dependency
- Regenerate poetry.lock to reflect removal of mypy from dev dependencies
- Ensures CI dependency installation works correctly
- All tests and lint checks continue to pass
2025-05-27 13:44:28 +08:00
Hal
030b3a2607
feat: Complete PyPI Query MCP Server Implementation (#3)
Merge pull request implementing complete PyPI query MCP server with comprehensive features and CI/CD pipeline.
2025-05-27 11:14:49 +08:00