Changed
- CLI:
pip-audit
now warns on the combination of-s osv
and
--require-hashes
, notifying users that only the PyPI service
can fully verify hashes
(#298)
Fixed
- CLI/Dependency sources:
--cache-dir=...
and other flags that affect
dependency resolver behavior now work correctly when auditing a
pyproject.toml
dependency source
(#300)