provenant-cli 0.0.8

Provenant is a high-performance Rust scanner for licenses, packages, and source provenance.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

#[cfg(test)]
mod tests {
    use crate::parsers::{PackageParser, PoetryLockParser};

    #[test]
    fn test_poetry_lock_optional_field_handling() {
        use std::fs;
        use tempfile::TempDir;

        let content = r#"# This file is automatically @generated by Poetry 1.8.3 and should not be changed by hand.

[[package]]
name = "requests"
version = "2.31.0"
description = "Python HTTP for Humans."
optional = false
python-versions = ">=3.7"
files = [
    {file = "requests-2.31.0-py3-none-any.whl", hash = "sha256:test"},
]

[[package]]
name = "pytest"
version = "7.4.0"
description = "pytest: simple powerful testing with Python"
optional = true
python-versions = ">=3.7"
files = [
    {file = "pytest-7.4.0-py3-none-any.whl", hash = "sha256:test"},
]

[metadata]
lock-version = "2.0"
python-versions = "^3.8"
content-hash = "test"
"#;

        let temp_dir = TempDir::new().expect("Failed to create temp dir");
        let lock_path = temp_dir.path().join("poetry.lock");
        fs::write(&lock_path, content).expect("Failed to write poetry.lock");

        let package_data = PoetryLockParser::extract_first_package(&lock_path);

        assert_eq!(package_data.dependencies.len(), 2);

        let requests = package_data
            .dependencies
            .iter()
            .find(|d| d.purl.as_ref().unwrap().contains("requests"))
            .expect("Should find requests dependency");

        assert_eq!(requests.is_optional, Some(false));
        assert_eq!(
            requests.is_runtime,
            Some(true),
            "Non-optional package should have is_runtime=true"
        );

        let pytest = package_data
            .dependencies
            .iter()
            .find(|d| d.purl.as_ref().unwrap().contains("pytest"))
            .expect("Should find pytest dependency");

        assert_eq!(pytest.is_optional, Some(true));
        assert_eq!(
            pytest.is_runtime,
            Some(false),
            "Optional package should have is_runtime=false"
        );
    }
}