Python: Component-governance extraction from setup.py does not include setup.cfg/pyproject.toml if executed from different dir.

[jenshnielsen]

The python code used to extract dependencies from setup.py would normally respect dependencies declared in more modern ways using setup.cfg/pyproject.toml but only if executed from the same directory.

E.g. changing the bundled code:

import distutils.core; setup=distutils.core.run_setup('{filePath.Replace('\\', '/')}'); print(setup.install_requires)

to something like (pseudocode)

import os; os.chdir(pathtofolderwithsetuppy); import distutils.core; setup=distutils.core.run_setup('{filePath.Replace('\\', '/')}'); print(setup.install_requires)

would also ensure that dependencies declared in setup.cfg/pyproject.toml (pep 621) would be included.