As much as I can see, there's only a docs/old folder,
$ ls bandit-0.12.0/docs/old /bin/ls: cannot access bandit-0.12.0/docs/old: No such file or directory
which doesn't contain sphinx doc,
But I didn't ask for "sphinx doc"...
and a docs/source folder which contains only 2 lines with only a title.
$ ls bandit-0.12.0/docs/source /bin/ls: cannot access bandit-0.12.0/docs/source: No such file or directory
So as much as I can tell, there's not much to package here, so I'm closing this bug until it's fixed upstream.
As I already said the initial bug report, the documentation is included upstream: $ ls -1 docs/*.md docs/exec.md docs/jinja2.md docs/ssl_tls.md docs/temp.md docs/xml.md docs/yaml.md -- Jakub Wilk