pyproject.toml

[project]
name = "misp-modules"
version = "3.1.1"
description = "MISP modules are autonomous modules that can be used for expansion and other services in MISP"
authors = [
    {name = "Alexandre Dulaunoy", email = "alexandre.dulaunoy@circl.lu"}
]
license = "AGPL-3.0-only"
readme = "README.md"
classifiers = [
    "License :: OSI Approved :: GNU Affero General Public License v3",
    "Development Status :: 5 - Production/Stable",
    "Environment :: Console",
    "Intended Audience :: Science/Research",
    "Programming Language :: Python :: 3",
    "Topic :: Security",
]
requires-python = ">=3.10,<4.0"
dependencies = [
    ## core dependencies
    "orjson>=3.11.9",
    "psutil",
    "tornado>=6.5.10,<6.6",  # keep Python 3.10 support
    "certifi>=2026.10.19",  # remove the compromised emSign root
    "urllib3>=2.8.0",
    "idna>=3.10,<4",
    "Brotli>=1.2.1; platform_python_implementation == 'CPython'",
    "brotlicffi>=1.2.1.0; platform_python_implementation != 'CPython'",
    "click==8.1.8",  # greynoise requires it
    ## minimum dependencies
    "beautifulsoup4",
    "jinja2",
    "markdownify",
    "pymisp>=2.5.34.1",
    "python-dateutil>=2.9.0.post0,<3.0.0",  # pypssl requires dateutil <3
    "publicsuffixlist",
    "setuptools",
]

[project.optional-dependencies]
minimal = [
    ## pinned module dependencies
    "censys==2.0.9",
    "socialscan<2.0.0",
    "yara-python==4.5.4",
    ## module dependencies
    "backscatter",
    "blockchain",
    "clamd",
    "crowdstrike-falconpy",
    "dnsdb2",
    "dnspython",
    "domaintools_api",
    "ddgs>=9.16.1,<10",
    "geoip2",
    "greynoise",
    "jbxapi",
    "ndjson",
    "maclookup",
    "matplotlib",
    "mattermostdriver",
    "oauth2",
    "passivetotal",
    "phonenumbers>=9.0,<10.0",
    "ptrclassify>=0.3.0,<0.4.0",
    "pycountry",
    "pyeti-python3",
    "pypdns",
    "pypssl",
    "pyeupi",
    "pygeoip",
    "pyintel471",
    "pyipasnhistory",
    "pymispwarninglists>=1.7.0",
    "pyonyphe>=3.1.0",
    "pysafebrowsing",
    "requests[security]",
    "rstapi>=1.2.0,<2",
    "slack-sdk",
    "urlarchiver",
    "vt-graph-api",
    "vt-py",
    "vulners",
    "whisper-misp",
]

all = [
    ## pinned module dependencies
    "censys==2.0.9",  ## in minimal
    "socialscan<2.0.0",  ## in minimal
    "yara-python==4.5.4",  ## in minimal
    "plyara>=2.2,<2.2.7",  # 2.2.7+ bundles incompatible ply, breaking pandoc imports
    "numpy>=2.0.0",
    "pandas>=2.0.0,<3.0.0",
    "pandas_ods_reader>=1.0.0",
    "lief>=0.17.6",  # required for python >3.13
    "lxml>=6.1.1",  # required for python >3.13
    ## module dependencies
    "anyrun-sdk>=1.14.19,<2.0.0",
    "apiosintds",
    "assemblyline_client",
    "backscatter",  ## in minimal
    "blockchain",   ## in minimal
    "cccs-yara>=2.11,<3",
    "clamd",   ## in minimal
    "crowdstrike-falconpy",   ## in minimal
    "dnsdb2",  ## in minimal
    "dnspython",  ## in minimal
    "domaintools_api",   ## in minimal
    "ddgs>=9.16.1,<10",   ## in minimal
    "geoip2",  ## in minimal
    "greynoise",  ## in minimal
    "jbxapi",   ## in minimal
    "maclookup",  ## in minimal
    "matplotlib",   ## in minimal
    "mattermostdriver",   ## in minimal
    "misp-stix>=2026.6.1",
    "mwdblib>=4.0.0",
    "ndjson",  ## in minimal
    "oauth2",   ## in minimal
    "opencv-python",
    "openpyxl",
    "pandoc",
    "passivetotal",   ## in minimal
    "phonenumbers>=9.0,<10.0",  ## in minimal
    "pdftotext",
    "ptrclassify>=0.3.0,<0.4.0",  ## in minimal
    "pycountry",  ## in minimal
    "pyeti-python3",  ## in minimal
    "pyeupi",  ## in minimal
    "pygeoip",  ## in minimal
    "pyintel471",  ## in minimal
    "pyipasnhistory",  ## in minimal
    "pymisp[fileobjects, openioc, pdfexport, email]>=2.5.34.1",
    "pymispwarninglists>=1.7.0",
    "pyonyphe>=3.1.0",  ## in minimal
    "pypdns",  ## in minimal
    "pypssl",  ## in minimal
    "pysafebrowsing",  ## in minimal
    "pytesseract",
    "python-docx",
    "python-pptx",
    "pyzbar",
    "requests[security]",  ## in minimal
    "rstapi>=1.2.0,<2",  ## in minimal
    "setuptools",
    "shodan",
    "sigmatools",
    "sigmf",
    "slack-sdk",  ## in minimal
    "sparqlwrapper",
    "tau-clients",
    "taxii2-client",
    "trustar",
    "urlarchiver",   ## in minimal
    "vt-graph-api",   ## in minimal
    "vt-py",   ## in minimal
    "vulners",   ## in minimal
    "vysion",
    "wand",
    "whisper-misp",  ## in minimal
    "xlrd",
]

[project.urls]
Issues = "https://github.com/MISP/misp-modules/issues"
Homepage = "https://github.com/MISP/misp-modules"
Documentation = "https://misp.github.io/misp-modules"
Repository = "https://github.com/MISP/misp-modules"

[project.scripts]
misp-modules = "misp_modules.__main__:main"

[tool.poetry]
packages = [{include = "misp_modules"}]

[build-system]
requires = ["poetry-core>=2.0.0,<3.0.0"]
build-backend = "poetry.core.masonry.api"

[tool.poetry.group.test]
optional = true

[tool.poetry.group.test.dependencies]
black = "*"
codecov = "*"
flake8 = "*"
flake8-pyproject = "*"
ipdb = "*"
isort = "*"
nose = "*"
pre-commit = "*"
pytest = "*"

[tool.poetry.group.docs]
optional = true

[tool.poetry.group.docs.dependencies]
mkdocs = "*"
mkdocs-material = "*"
markdown_include = "*"

[tool.poetry.requires-plugins]
poetry-plugin-bundle = ">=1.7"
poetry-plugin-export = ">=1.10"

[tool.black]
line-length = 120
target-version = ["py312"]
preview = true
enable-unstable-feature = ["string_processing"]

[tool.isort]
line_length = 120

[tool.flake8]
max-line-length = 120
exclude = [".git", "__pycache__"]
extend-ignore = [
    "E402", "E501", "E712", "E203",
]

[tool.pytest.ini_options]
filterwarnings = [
    "ignore:.*deprecated to return a value that is not None.*:DeprecationWarning:",
]
log_cli = true
log_cli_level = "INFO"
log_cli_format = "%(asctime)s [%(levelname)8s] %(message)s (%(filename)s:%(lineno)s)"
log_cli_date_format = "%Y-%m-%d %H:%M:%S"