Packaging of Application Quality Auditing Tools

[bevalentin]

Pre-selected application quality analysis tools are:

• Security

  • Bandit: Security-focused tool designed for analysing Python based Applications and to find common security issues

• Dependency & Build ManagementUsed to analyse the Python Applications dependencies and packages, tracking the packages required for each project.Additional dependency management tools may be supported depending on the application programming language

  • pyenv
  • pipreqs

• Testing & Test Framework

  • pytest: Testing framework for Python that will allow writing special and adhoc measurements elicitation against the Applications under audit

• Documentation Tools & Artifacts

  • Sphinx
  • Swagger

  Sphinx focuses on overall project documentation; Swagger (OpenAPI Specification) is specific to API design and documentation. Both will contribute to maintaining a high level of software quality by ensuring consistent documentation and adherence to best practices.