Adds prospector static code analysis tool

.github/workflows/tool-tests.yml

@@ -39,6 +39,9 @@ jobs:
       - name: Install python requirements
         run: python -m pip install -r packaging_automation/requirements.txt
 
+      - name: Run static code analysis
+        run: python -m prospector
+
       - name: Unit tests for "Update Package Properties"
         run: python -m pytest -q packaging_automation/tests/test_update_package_properties.py
 

packaging_automation/requirements.in

@@ -15,3 +15,4 @@ SQLAlchemy
 urllib3
 wheel
 python-dotenv
+prospector[with_everything]

packaging_automation/requirements.txt

@@ -4,8 +4,16 @@
 #
 #    pip-compile
 #
+astroid==2.7.3
+    # via
+    #   pylint
+    #   pylint-celery
+    #   pylint-flask
+    #   requirements-detector
 attrs==21.2.0
     # via pytest
+bandit==1.7.0
+    # via prospector
 certifi==2021.5.30
     # via requests
 cffi==1.14.5
@@ -16,44 +24,112 @@ deprecated==1.2.12
     # via pygithub
 docker==5.0.0
     # via -r requirements.in
+docutils==0.17.1
+    # via pyroma
+dodgy==0.2.1
+    # via prospector
+flake8-polyfill==1.0.2
+    # via pep8-naming
+flake8==3.8.4
+    # via flake8-polyfill
+frosted==1.4.1
+    # via prospector
 gitdb==4.0.7
     # via gitpython
 gitpython==3.1.18
-    # via -r requirements.in
+    # via
+    #   -r requirements.in
+    #   bandit
 greenlet==1.1.0
     # via sqlalchemy
 idna==2.10
     # via requests
 iniconfig==1.1.1
     # via pytest
+isort==5.9.3
+    # via pylint
 jinja2==3.0.1
     # via -r requirements.in
+lazy-object-proxy==1.6.0
+    # via astroid
 markupsafe==2.0.1
     # via jinja2
+mccabe==0.6.1
+    # via
+    #   flake8
+    #   prospector
+    #   pylint
+mypy-extensions==0.4.3
+    # via mypy
+mypy==0.910
+    # via prospector
 packaging==20.9
     # via pytest
 parameters-validation==1.2.0
     # via -r requirements.in
 pathlib2==2.3.5
     # via -r requirements.in
+pbr==5.6.0
+    # via stevedore
+pep8-naming==0.10.0
+    # via prospector
+pies==2.6.7
+    # via frosted
+platformdirs==2.3.0
+    # via pylint
 pluggy==0.13.1
     # via pytest
+prospector[with_everything]==1.5.0.1
+    # via -r requirements.in
 psycopg2==2.9.1
     # via -r requirements.in
 py==1.10.0
     # via pytest
+pycodestyle==2.6.0
+    # via
+    #   flake8
+    #   prospector
 pycparser==2.20
     # via cffi
 pycurl==7.43.0.6
     # via -r requirements.in
+pydocstyle==6.1.1
+    # via prospector
+pyflakes==2.2.0
+    # via
+    #   flake8
+    #   prospector
 pygithub==1.55
     # via -r requirements.in
+pygments==2.10.0
+    # via pyroma
 pyjwt==2.1.0
     # via pygithub
+pylint-celery==0.3
+    # via prospector
+pylint-django==2.4.4
+    # via prospector
+pylint-flask==0.6
+    # via prospector
+pylint-plugin-utils==0.6
+    # via
+    #   prospector
+    #   pylint-celery
+    #   pylint-django
+    #   pylint-flask
+pylint==2.10.2
+    # via
+    #   prospector
+    #   pylint-celery
+    #   pylint-django
+    #   pylint-flask
+    #   pylint-plugin-utils
 pynacl==1.4.0
     # via pygithub
 pyparsing==2.4.7
     # via packaging
+pyroma==3.2
+    # via prospector
 pytest==6.2.4
     # via -r requirements.in
 python-dotenv==0.19.0
@@ -63,29 +139,56 @@ python-gnupg==0.4.7
 python-string-utils==1.0.0
     # via -r requirements.in
 pyyaml==5.4.1
-    # via -r requirements.in
+    # via
+    #   -r requirements.in
+    #   bandit
+    #   prospector
 requests==2.25.1
     # via
     #   -r requirements.in
     #   docker
     #   pygithub
+    #   pyroma
+requirements-detector==0.7
+    # via prospector
+setoptconf==0.2.0
+    # via prospector
 six==1.16.0
     # via
+    #   bandit
     #   pathlib2
     #   pynacl
 smmap==4.0.0
     # via gitdb
+snowballstemmer==2.1.0
+    # via pydocstyle
 sqlalchemy==1.4.20
     # via -r requirements.in
+stevedore==3.4.0
+    # via bandit
 toml==0.10.2
-    # via pytest
+    # via
+    #   mypy
+    #   prospector
+    #   pylint
+    #   pytest
+    #   vulture
+typing-extensions==3.10.0.2
+    # via mypy
 urllib3==1.26.6
     # via
     #   -r requirements.in
     #   requests
+vulture==2.3
+    # via prospector
 websocket-client==1.1.0
     # via docker
 wheel==0.36.2
     # via -r requirements.in
 wrapt==1.12.1
-    # via deprecated
+    # via
+    #   astroid
+    #   deprecated
+
+# The following packages are considered to be unsafe in a requirements file:
+# setuptools