theory/pyproject.toml at main · threatcraft-co/theory · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
[build-system]
requires = ["setuptools>=68", "wheel"]
build-backend = "setuptools.build_meta"

[project]
name = "theory-ti"
version = "1.0.0"
description = "Multi-source threat actor intelligence framework"
readme = "README.md"
license = { text = "MIT" }
authors = [
    { name = "Threatcraft", email = "threatcraft@proton.me" }
]
keywords = [
    "threat-intelligence", "mitre-attack", "cybersecurity",
    "osint", "stix", "sigma", "threat-hunting", "apt"
]
classifiers = [
    "Development Status :: 5 - Production/Stable",
    "Environment :: Console",
    "Intended Audience :: Information Technology",
    "Intended Audience :: Science/Research",
    "License :: OSI Approved :: MIT License",
    "Operating System :: OS Independent",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Topic :: Security",
    "Topic :: Scientific/Engineering :: Information Analysis",
]
requires-python = ">=3.11"
dependencies = [
    "rich>=13.0",
    "requests>=2.31",
    "python-dotenv>=1.0",
    "stix2>=3.0",
    "pyyaml>=6.0",
    "feedparser>=6.0",
    "python-dateutil>=2.8",
    "jinja2>=3.1",
    "click>=8.1",
    "shodan>=1.28",
    "censys>=2.2",
    "watchdog>=3.0",
    "schedule>=1.2",
    # Hardened XML parser — refuses entity expansion (billion laughs)
    # and external entity references (XXE) on attacker-influenceable RSS.
    "defusedxml>=0.7.1",
]

[project.optional-dependencies]
dev = [
    "pytest>=8.0",
    "pytest-cov>=5.0",
    "ruff>=0.4",
    # Supply-chain advisory scanning in CI
    "pip-audit>=2.7",
]

[project.scripts]
theory = "theory:main"

[project.urls]
Homepage = "https://github.com/threatcraft-co/theory"
Repository = "https://github.com/threatcraft-co/theory"
"Bug Tracker" = "https://github.com/threatcraft-co/theory/issues"

[tool.setuptools.packages.find]
where = ["."]
include = [
    "theory*",
    "collectors*",
    "mappers*",
    "processors*",
    "reporters*",
]

[tool.setuptools.package-data]
"*" = ["config/*.yaml"]

[tool.ruff]
line-length = 120

[tool.ruff.lint]
# Ignore list mirrors the one CI applies via --ignore so local `ruff check .`
# matches CI exactly.
ignore = [
    "E501",                          # line too long
    "E402",                          # module-level import not at top
    "W291", "W292", "W293",          # trailing whitespace (ASCII banner lines)
    "E701", "E702",                  # multiple statements on one line
    "E731",                          # lambda assignment (sort-key idiom)
    "F401",                          # imported but unused (conditional imports)
    "F541",                          # f-string without placeholders
    "F841",                          # local variable assigned but never used
    "F811",                          # redefinition of unused name (proxy pattern)
    "F821",                          # undefined name (dynamic function insertion in _cli.py)
]