Anna
08b16f5a0c
Switch to PEP517 standard for builds ( #887 )
...
* Sync setup.cfg with requirements.txt
* Include tests in PyPI tarballs
And exclude them from setuptools
* Set version number only once
Switch to PEP517 standard (pyproject.toml) for builds
2022-11-25 16:24:38 -07:00
Sandro
ad112e236e
Fix pipx dependencies ( #738 )
...
Missing cssutils
2022-04-27 13:01:06 -06:00
Ben Busby
2a0ad8796c
Switch to defusedxml for xml parsing
...
xml.etree.ElementTree.fromstring is considered insecure, see:
https://docs.python.org/3/library/xml.etree.elementtree.html
The defusedxml package contains several Python-only workarounds and
fixes for denial of service and other vulnerabilities in Python's XML
libraries: https://github.com/tiran/defusedxml
Fixes #670
2022-03-01 12:54:32 -07:00
jan Anja
5069838e69
Configure setup() using setup.cfg ( #667 )
...
Dependencies are not read from requirements.txt intentionally, so only
direct dependencies without version pinning are included.
Setuptools documentation:
https://setuptools.pypa.io/en/latest/userguide/declarative_config.html
2022-02-25 15:29:54 -07:00