pkgrisk 0.1.0

5-second package health and risk analysis for npm, PyPI and crates.io dependencies
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

use serde::Deserialize;
use std::path::PathBuf;

#[derive(Deserialize, Debug, Clone)]
#[allow(dead_code)]
pub struct Config {
    pub general: GeneralConfig,
    pub thresholds: ThresholdsConfig,
    pub license: LicenseConfig,
    pub ecosystems: EcosystemsConfig,
}

#[derive(Deserialize, Debug, Clone)]
#[allow(dead_code)]
pub struct GeneralConfig {
    pub cache_ttl_hours: u64,
    pub default_format: String,
}

#[derive(Deserialize, Debug, Clone)]
#[allow(dead_code)]
pub struct ThresholdsConfig {
    pub fail_under: u8,
    pub warn_under: u8,
}

#[derive(Deserialize, Debug, Clone)]
#[allow(dead_code)]
pub struct LicenseConfig {
    pub project_license: String,
    pub blocklist: Vec<String>,
}

#[derive(Deserialize, Debug, Clone)]
#[allow(dead_code)]
pub struct EcosystemsConfig {
    pub disabled: Vec<String>,
}

impl Default for Config {
    fn default() -> Self {
        Self {
            general: GeneralConfig {
                cache_ttl_hours: 24,
                default_format: "terminal".to_string(),
            },
            thresholds: ThresholdsConfig {
                fail_under: 40,
                warn_under: 65,
            },
            license: LicenseConfig {
                project_license: "MIT".to_string(),
                blocklist: vec!["AGPL-3.0".to_string(), "GPL-2.0".to_string()],
            },
            ecosystems: EcosystemsConfig {
                disabled: vec![],
            },
        }
    }
}

pub fn load_config() -> anyhow::Result<Config> {
    let mut config_paths = vec![PathBuf::from(".pkgriskrc.toml")];
    if let Some(home) = dirs::home_dir() {
        config_paths.push(home.join(".config").join("pkgrisk").join("config.toml"));
    }

    for path in config_paths {
        if path.exists() {
            let contents = std::fs::read_to_string(path)?;
            let config: Config = toml::from_str(&contents)?;
            return Ok(config);
        }
    }

    Ok(Config::default())
}