Fix: Parse unquoted dependencies in setup.py with .split() pattern

[HalaAli198]

Description

The current process_setup_py() method only detects dependencies wrapped in quotes within list syntax:
pythoninstall_requires = ["django==4.2.23", "CairoSVG==2.7.1"]
However, many Python projects define dependencies using multiline strings followed by .split():

install_requires = """
django==4.2.23
CairoSVG==2.7.1
Pillow==11.0.0
""".split()

Solution:

Enhanced process_setup_py() to add support for the .split() pattern by detecting multiline strings defined with triple quotes using the regex: install_requires\s*=\s*["\'"]{3}([^"\']+)["\'"]{3}\.split\(\)

This update:

• Maintains backward compatibility — existing list parsing behavior remains unchanged.
• Supports both quote styles — handles """...""".split() and '''...'''.split() patterns.
• Improves SBOM accuracy for Python projects using common unquoted dependency definitions.

Testing

1. Download a real-world project that uses this pattern (e.g., mayan-edms): pip download --no-deps --no-binary :all: mayan-edms==4.9.2

2. Extract the source and inspect setup.py — it defines dependencies via """.split().

3. Run SBOM4Python before and after applying the fix:
   bashsbom4python -r setup.py --sbom cyclonedx --format json -o output.json --debug

4. Compare results:
   Before fix: [] (0 dependencies detected)
   After fix: 57 dependencies correctly parsed from install_requires