caliscope/pyproject.toml at main · mprib/caliscope · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
[project]
name = "caliscope"
version = "0.8.1"
description = "Rapid and reliable multicamera calibration with GUI and scripting API"
authors = [{name = "Mac Prible", email = "prible@gmail.com"}]
license = { text = "BSD-2-Clause" }
readme = "README.md"
requires-python = ">=3.10,<3.14"

dependencies = [
    "pandas>=1.5.0",
    "scipy>=1.10.1",
    "opencv-python>=4.8.0.74",
    "rtoml>=0.9.0",
    "pyarrow>=15.0.0",
    "platformdirs>=4.3.8",
    "av>=16.0.0,<16.1.0",  # 16.1.0 lacks Linux wheels as of 2025-01 - revisit
    "onnxruntime>=1.16.0",
    "rich>=13.0.0",
    # Security floor constraints for transitive dependencies (dependabot alerts)
    "urllib3>=2.6.3",    # CVE fixes: decompression bomb, streaming API
    "fonttools>=4.60.2", # CVE fix: arbitrary file write, XML injection
    "protobuf>=5.29.6",  # CVE fix: JSON recursion depth bypass
    "pillow>=12.1.1",    # CVE fix: out-of-bounds write loading PSD images
]

[project.urls]
repository = "https://github.com/mprib/caliscope"

[project.scripts]
caliscope = "caliscope.__main__:CLI_parser"

[project.optional-dependencies]
gui = [
    "pyside6-essentials>=6.10.1",
    "pyside6-addons>=6.10.2",
]

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[tool.hatch.build.targets.sdist]
exclude = [
  "**/*.mp4",
  "tests/**",
  "docs/**",
  "scripts/**",
  "paper/**",
]

[tool.hatch.build.targets.wheel]
packages = ["src/caliscope"]

[tool.hatch.build.targets.wheel.source]
"src" = ""

[tool.ruff]
line-length = 120
target-version = "py311"
unsafe-fixes = true
exclude = [
    ".bzr",
    ".direnv",
    ".eggs",
    ".git",
    ".hg",
    ".mypy_cache",
    ".nox",
    ".pants.d",
    ".pytype",
    ".ruff_cache",
    ".svn",
    ".tox",
    ".venv",
    "__pypackages__",
    "_build",
    "buck-out",
    "build",
    "dist",
    "node_modules",
    "venv",
    "dev",
]


[tool.ruff.lint]
select = ["E", "F", "W"]
# Allow unused variables when underscore-prefixed.
dummy-variable-rgx = "^(_+|(_+[a-zA-Z0-9_]*[a-zA-Z0-9]+?))$"

[tool.ruff.lint.mccabe]
# Unlike Flake8, default to a complexity level of 10.
max-complexity = 10

[tool.ruff.format]
# Use double quotes for strings.
quote-style = "double"

# Use spaces for indentation.
indent-style = "space"

# Respect the magic trailing comma.
skip-magic-trailing-comma = false

# Normalize line endings to LF for consistency across operating systems.
line-ending = "lf"

[tool.basedpyright]
typeCheckingMode = "standard"
exclude = ["dist", "build", ".venv", "dev"]
reportMissingTypeStubs = false
reportAny = false

[tool.pytest.ini_options]
testpaths = ["tests"]
python_files = ["test_*.py"]
python_classes = ["Test*"]
python_functions = ["test_*"]
markers = [
    "slow: marks tests as slow (deselect with '-m \"not slow\"')",
]

[dependency-groups]
dev = [
    "pytest>=7.3.0",
    "pytest-xdist>=3.8.0",
    "pre-commit>=4.3.0",
    "ipykernel>=6.22.0",
    "pymdown-extensions>=9.11,<11.0",
    "mkdocs-material>=9.1.6",
    "mkdocs-git-revision-date-localized-plugin>=1.2.0",
    "ruff>=0.6.5",
    "basedpyright>=1.18.0",
    "matplotlib>=3.7.0",
    "onnx>=1.14.0",
    "openpyxl",
    "pywinctl",
    "pandas-stubs>=2.3.3.251219",
    "psutil>=6.0.0",  # Resource monitoring for diagnostics
    # Security floor constraints for transitive dependencies (dependabot alerts)
    "filelock>=3.20.3",   # CVE fix: TOCTOU symlink vulnerability
    "virtualenv>=20.36.1", # CVE fix: TOCTOU directory creation
    "tornado>=6.5.5",     # CVE fixes: multipart DoS, cookie validation
]