[MIR] bandit

[Corey Bryant]

[Availability]
Currently in universe

[Rationale]
Dependency for Openstack Liberty.

[Security]
No security history

[Quality Assurance]
Package works out of the box with no prompting. There are no major bugs in Ubuntu and there are no major bugs in Debian. Unit tests are run during build.

[Dependencies]
All are in main

[Standards Compliance]
FHS and Debian Policy compliant.

[Maintenance]
Simple python package that the Ubuntu Server Team will take care of.

[Background]
Security oriented static analyzer for python code.

[Michael Terry (mterry)]

- Failed tests don't stop the build but should
- Needs a team bug subscriber

But otherwise looks fine. Just used during build for static analysis. In sync. Modern packaging.

[Corey Bryant (corey.bryant)]

We just uploaded a new version of the package with updates to (build-)depends and test execution, and the package now has a team bug subscriber. Thanks Michael.

[Michael Terry (mterry)]

I don't think the bug subscriber thing went through? I see the test update though, thanks.

[Corey Bryant (corey.bryant)]

Sorry (I wish I could do these things myself). All set now. Thanks.

[Colin Watson (cjwatson)]

Moved to main.

[Dave Walker (davewalker)]

@Corey, there really is no need to diverge with Debian on this.. Please push your changes back to Debian.

Thanks

[Corey Bryant (corey.bryant)]

Dave, Agreed. I submitted a patch back to Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796394