provenant-cli 0.0.8

Provenant is a high-performance Rust scanner for licenses, packages, and source provenance.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

#[cfg(test)]
mod tests {
    use std::path::Path;

    use super::super::scan_test_utils::{
        assert_dependency_present, assert_file_links_to_package, scan_and_assemble,
    };
    use crate::models::{DatasourceId, PackageType};

    #[test]
    fn test_composer_basic_scan_assembles_manifest_and_lockfile() {
        let (files, result) =
            scan_and_assemble(Path::new("testdata/assembly-golden/composer-basic"));

        let package = result
            .packages
            .iter()
            .find(|package| {
                package.namespace.as_deref() == Some("test")
                    && package.name.as_deref() == Some("package")
            })
            .expect("composer package should be assembled");

        assert_eq!(package.package_type, Some(PackageType::Composer));
        assert_eq!(package.version.as_deref(), Some("1.0.0"));
        assert_eq!(
            package.purl.as_deref(),
            Some("pkg:composer/test/package@1.0.0")
        );
        assert_dependency_present(
            &result.dependencies,
            "pkg:composer/phpunit/phpunit",
            "composer.json",
        );
        assert_dependency_present(
            &result.dependencies,
            "pkg:composer/phpunit/phpunit@10.0.0",
            "composer.lock",
        );
        assert_file_links_to_package(
            &files,
            "/composer.json",
            &package.package_uid,
            DatasourceId::PhpComposerJson,
        );
        assert_file_links_to_package(
            &files,
            "/composer.lock",
            &package.package_uid,
            DatasourceId::PhpComposerLock,
        );
    }
}