run-safety.sh

#! /bin/bash
# 38678: django-celery-results: no update currently available
# https://github.com/celery/django-celery-results/issues/154
# 39253:  py.path.svnwc DOS
# 39535:
#   https://github.com/inducer/relate/pull/779
#   amounts to pysaml2 >= 6.5.1 version bump, done in pyproject.toml
# 40291: affects pip, not related to relate's safety
# code not used
# 4471{5,6,7}: We're not using numpy in a user-exposed-manner.
# 51549: No call path from relate to mpmathify
# 51499: Not calling wheel in a safety-related manner
# 51457: not calling py in a safety-related manner
# 65213: nonsense according to
#    https://github.com/pyca/pyopenssl/issues/1300
# 67599: pip issue, utter nonsense
# 70612: Jinja2 SSTI, as of https://github.com/inducer/relate/pull/1053
#   there is no longer a direct Jinja dependency, and no known path to SSTI.
safety check \
        -i 38678 \
        -i 39253 \
        -i 39535 \
        -i 40291 \
        -i 44715 \
        -i 44716 \
        -i 44717 \
        -i 51159 \
        -i 51549 \
        -i 51499 \
        -i 51457 \
        -i 65213 \
        -i 67599 \
        -i 70612 \
        --full-report