provenant-cli 0.0.8

Provenant is a high-performance Rust scanner for licenses, packages, and source provenance.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

#[cfg(test)]
mod tests {
    use crate::parsers::{PackageParser, PipfileLockParser};

    #[test]
    fn test_pipfile_lock_with_develop_dependencies() {
        use std::fs;
        use tempfile::tempdir;

        let content = r#"{
    "_meta": {
        "hash": {"sha256": "test-hash"},
        "pipfile-spec": 6
    },
    "default": {
        "requests": {
            "hashes": ["sha256:abc123"],
            "version": "==2.28.0"
        }
    },
    "develop": {
        "pytest": {
            "hashes": ["sha256:def456"],
            "version": "==7.2.0"
        },
        "black": {
            "hashes": ["sha256:ghi789"],
            "version": "==23.1.0"
        }
    }
}"#;

        let temp_dir = tempdir().unwrap();
        let file_path = temp_dir.path().join("Pipfile.lock");
        fs::write(&file_path, content).unwrap();

        let package_data = PipfileLockParser::extract_first_package(&file_path);

        assert_eq!(package_data.dependencies.len(), 3);

        let default_deps: Vec<_> = package_data
            .dependencies
            .iter()
            .filter(|dep| dep.scope.as_deref() == Some("install"))
            .collect();
        assert_eq!(default_deps.len(), 1);
        assert_eq!(default_deps[0].is_runtime, Some(true));

        let develop_deps: Vec<_> = package_data
            .dependencies
            .iter()
            .filter(|dep| dep.scope.as_deref() == Some("develop"))
            .collect();
        assert_eq!(develop_deps.len(), 2);
        for dep in develop_deps {
            assert_eq!(dep.scope, Some("develop".to_string()));
            assert_eq!(dep.is_runtime, Some(false));
        }
    }
}