The article is about running Bandit over PyPI, but I presume there are other options for this than Bandit. What is everyone's favourite security oriented static analysis tool for Python code?
I've done extensive research in this area and looked at existing tools including bandit to scan the whole pypi repository and monitor what is being uploaded there, the conclusion was that most of the tools are not up for this task so I made a new framework from scratch that is specially design for this purpose, to scan the whole PyPI repository, it's called Aura: https://github.com/SourceCode-AI/aura
