provenant-cli 0.0.5

Provenant is a high-performance Rust scanner for licenses, packages, and source provenance.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125

[package]
name = "provenant-cli"
version = "0.0.5"
edition = "2024"
repository = "https://github.com/mstykow/provenant"
homepage = "https://github.com/mstykow/provenant"
description = "Provenant is a high-performance Rust scanner for licenses, packages, and source provenance."
license = "Apache-2.0"
keywords = ["provenance", "license", "analysis", "rust"]
categories = ["command-line-utilities", "development-tools"]
readme = "README.md"
authors = ["Maxim Stykow", "Adrian Braemer"]
# Include only files needed to build from source
include = [
    "/src/**/*",
    "/resources/licenses/json/details/**/*.json",
    "/Cargo.toml",
    "/Cargo.lock",
    "/README.md",
    "/LICENSE",
    "/NOTICE",
]

[package.metadata.cargo-machete]
ignored = ["md-5", "kamadak-exif"]  # Used as `md5`/`exif` (crate renames) — machete can't detect without --with-metadata

[package.metadata.release]
# Sign git tags with GPG
sign-tag = true
# Push automatically
push = true
# Commit message template
pre-release-commit-message = "chore: release v{{version}}"
# Tag message template
tag-message = "Release v{{version}}"
# Publish to crates.io automatically
publish = true

[dependencies]
# askalono
anyhow = "1.0.102"
flate2 = "1.1.9"
lazy_static = "1.5.0"
liblzma = "0.4.6"
log = "0.4.29"
regex = "1.12.3"
rmp-serde = "1.3.1"
rustpython-parser = "0.4.0"
unicode-normalization = "0.1.25"
zstd = "0.13.3"

# own
base64 = "0.22.1"
chrono = "0.4.44"
clap = { version = "4.6.0", features = ["derive"] }
content_inspector = "0.2.4"
derive_builder = "0.20.2"
glob = "0.3.3"
image = { version = "0.25.10", default-features = false, features = ["jpeg", "png", "tiff", "webp"] }
include_dir = "0.7.4"
indicatif = "0.18.4"
indicatif-log-bridge = "0.2.3"
json5 = "1.3.1"
kamadak-exif = "0.6.1"
md-5 = "0.10.6"
mime_guess = "2.0.5"
packageurl = "0.6.0"
pep508_rs = "0.9.2"
pdf-extract = "0.10.0"
rayon = "1.11.0"
rustc_version_runtime = "0.3.0"
serde = { version = "1.0.228", features = ["derive"] }
serde_json = { version = "1.0.149", features = ["preserve_order"] }
serde_yaml = "0.9.34"
sha1 = "0.10.6"
csv = "1.4.0"
inventory = "0.3.22"
sha2 = "0.10.9"
tar = "0.4.44"
sys-info = "0.9.1"
toml = "1.0.6"
url = "2.5.8"
quick-xml = "0.39.2"
tera = { version = "1.20.1", default-features = false }
zip = "8.2.0"
uuid = { version = "1.22.0", features = ["v4"] }
blake3 = "1.8.3"
env_logger = "0.11.9"

# Linux package parsers
ar = "0.9"           # Unix ar archive format (for .deb)
rpm = { version = "0.19.0", default-features = false, features = ["gzip-compression", "xz-compression", "zstd-compression", "bzip2-compression"] }
rpmdb = { version = "0.1.0", git = "https://github.com/yybit/rpmdb-rs", rev = "8a20c8b8" }
strum = { version = "0.28.0", features = ["derive"] }

[dev-dependencies]
# own
tempfile = "3.27.0"

[profile.release]
# Enable link-time optimization for better cross-module optimizations
lto = true

# Enable whole-program optimization
codegen-units = 1

# Maximum optimization level
opt-level = 3

# Strip debug symbols to reduce binary size
strip = true

[lib]
name = "provenant"
path = "src/lib.rs"

[[bin]]
name = "provenant"
path = "src/main.rs"

[features]
default = ["spdx"]
golden-tests = []
gzip = []
spdx = []