Bandit 0.15.0 [New Features] - new plugin that checks for Flask with debug=True - "baseline" reporting [Enhancements] - plugin names now shown in reports - metrics now shown in HTML report - HTML report styling done with CSS - changed oslo secret config option confidence - distinguished levels of command injection findings [Behind the Scenes] - misc improvements - refactored metrics code [Documentation] - added a few missing topics - added links to relevant security development guidance