There's a merged pull request on the void-packages repository

bandit: remove package.
https://github.com/void-linux/void-packages/pull/27056

Description:
Was going to be orphaned, but since it is a leaf package installable via
pip, it's simpler to completely remove it.