pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities It uses the Python Packaging Advisory Database (githubcom/pypa/advisory-database) via the PyPI JSON API as a source of vulnerability reports This project is maintained in part by Trail of Bits with support from Google This is not an official Google or Trail o