
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
pycycle
Advanced tools
.. image:: https://img.shields.io/pypi/v/pycycle.svg :target: https://pypi.python.org/pypi/pycycle
.. image:: https://img.shields.io/pypi/l/pycycle.svg :target: https://pypi.python.org/pypi/pycycle
.. image:: https://img.shields.io/pypi/wheel/pycycle.svg :target: https://pypi.python.org/pypi/pycycle
.. image:: https://img.shields.io/pypi/pyversions/pipenv.svg :target: https://pypi.python.org/pypi/pycycle
.. image:: https://api.travis-ci.org/bndr/pycycle.svg?branch=master :target: https://travis-ci.org/bndr/pycycle
Pycycle is an experimental project that aims to help python developers fix their circular dependencies problems.
ImportError: Cannot import name X is a python exception that is related to the circular imports, but the exception tells nothing about where or what.
This tool automatically analyzes the imports of your projects, and looks for imports that may cause a circular dependency problem.
.. image:: https://i.imgur.com/8JeLQxu.gif
::
$ pycycle
Usage: pycycle [OPTIONS] COMMAND [ARGS]...
Examples:
Get the circular imports in current project:
$ pycycle --here
Look for circular imports in another project
$ pycycle --source /home/user/workspace/awesome_project
Ignore specific directories when looking for circular import
$ pycycle --source /home/user/workspace/awesome_project --ignore some_dir,some_dir2
Get verbose output
$ pycycle --source /home/user/workspace/awesome_project --verbose
Options:
--verbose Verbose output.
--here Try to find cycles in the current project.
--source TEXT Try to find cycles in the path provided.
--ignore TEXT Comma separated directories that will be ignored during
analysis.
--encoding TEXT Change enconding with which the project is read.
--help Show this message then exit.
--version Show the version and exit.
::
$ pycycle --here
Project successfully transformed to AST, checking imports for cycles..
Cycle Found :(
a_module.a_file: Line 1 -> a_module.b_module.b_file: Line 1 -> c_module.c_file: Line 1 -> d_module.d_file: Line 1 =>> a_module.a_file
Finished.
::
$ pycycle --source /Users/vkravcenko/workspace/awesome_project
Target source provided:/Users/vkravcenko/workspace/awesome_project
Project successfully transformed to AST, checking imports for cycles..
No worries, no cycles here!
If you think some cycle was missed, please open an Issue on Github.
Finished.
::
$ pip install pycycle
FAQs
Find and repair your import cycles in any project
We found that pycycle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.