python依赖报毒

自己的项目安装python依赖时报毒, 大概率误报, 不过还是检查一下安全, 万一源头被投毒呢,

1. [project]
   
2. name = "
   
3. version = "0.1.0"
   
4. description = ""
   
5. readme = "README.md"
   
6. license = "Apache-2.0"
   
7. license-files = ["LICENSE"]
   
8. authors = [{ name = "" }]
   
9. requires-python = ">=3.12"
   
10. keywords = ["qbittorrent", "private-tracker", "torrent", "automation", "seeding"]
    
11. classifiers = [
    
12.     "Development Status :: 4 - Beta",
    
13.     "Environment :: Console",
    
14.     "Environment :: X11 Applications",
    
15.     "Intended Audience :: End Users/Desktop",
    
16.     "Operating System :: Microsoft :: Windows",
    
17.     "Operating System :: POSIX :: Linux",
    
18.     "Operating System :: MacOS",
    
19.     "Programming Language :: Python :: 3",
    
20.     "Programming Language :: Python :: 3.12",
    
21.     "Programming Language :: Python :: 3.13",
    
22.     "Topic :: Communications :: File Sharing",
    
23.     "Topic :: Utilities",
    
24. ]
    
25. 
    
26. # 直接依赖: 精确锁定 (uv.lock 会锁全量传递依赖; 升级时改这里再 `uv lock --upgrade`)
    
27. dependencies = [
    
28.     "pyyaml==6.0.3",
    
29.     "qbittorrent-api==2026.8.1",
    
30.     "filelock==3.32.6",
    
31.     "pystray==0.19.5",
    
32.     "pillow==12.3.0",
    
33.     "customtkinter==6.0.0",
    
34.     "fastapi==0.141.1",
    
35.     "uvicorn==0.53.0",
    
36.     "ruamel.yaml==0.19.1",
    
37.     "httpx==0.28.1",
    
38. ]
    
39. 
    
40. [project.scripts]
    
41. auto-qb = "auto_qb.cli:main"
    
42. 
    
43. # 开发/测试依赖 (PEP 735 依赖组, 取代 .github/workflows/requirements-dev.txt 的 dev 部分)
    
44. [dependency-groups]
    
45. dev = [
    
46.     "pytest==9.1.1",
    
47.     "pytest-cov==7.1.0",
    
48. ]
    
49. 
    
50. [build-system]
    
51. requires = ["hatchling"]
    
52. build-backend = "hatchling.build"
    
53. 
    
54. [tool.hatch.build.targets.wheel]
    
55. packages = ["src/auto_qb"]
    

复制代码

顺便提一下, python venv 执行 pytest 时会警告:

1. 进程：C:\Users\11059\AppData\Local\Programs\Python\Python312\python.exe
   
2. 动作：创建文件链接
   
3. 路径：C:\TEMP\pytest-of-11059\pytest-590
   
4. 风险文件：D:\Projects\auto-qb-autoclaw\.venv\Scripts\pytest.exe
   
5. 全部允许
   
6. 拦截补充描述：程序正在创建文件链接，会绕过安全软件的文件防护。如果不是您主动创建，请阻止。
   
7. 
   
8. 防护信息: AD|59, 720|30, 30, -1||

复制代码

您好，您直接打包，上传到我们开放平台，让我们技术协助您看下：https://open.soft.360.cn/report.php