This is the only package requiring old version of dev-python/hacking. Please look into the possibility of making it work with newer versions.
...which in turn requires ancient dev-python/flake8.
Update: upstream issue is fixed, bandit on pypi is at 1.5.1. Could we bump and clean?
should be good now, had to update 90 or so packages though.