From cf3f392abec5e0e41fb33991c3db9fd5d00a47af Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 14 Jan 2024 11:41:22 +0100 Subject: [PATCH] packj: init at 0.15-beta Tool to detect malicious/vulnerable open-source dependencies https://github.com/ossillate-inc/packj --- pkgs/by-name/pa/packj/package.nix | 62 +++++++++++++++++++++++++++++++ 1 file changed, 62 insertions(+) create mode 100644 pkgs/by-name/pa/packj/package.nix diff --git a/pkgs/by-name/pa/packj/package.nix b/pkgs/by-name/pa/packj/package.nix new file mode 100644 index 000000000000..5e859823efdf --- /dev/null +++ b/pkgs/by-name/pa/packj/package.nix @@ -0,0 +1,62 @@ +{ lib +, python3 +, fetchFromGitHub +}: + +python3.pkgs.buildPythonApplication rec { + pname = "packj"; + version = "0.15-beta"; + pyproject = true; + + src = fetchFromGitHub { + owner = "ossillate-inc"; + repo = "packj"; + rev = "refs/tags/v${version}"; + hash = "sha256-OWcJE2Gtjgoj9bCGZcHDfAFLWRP4wdENeJAnILMdUXY="; + }; + + preBuild = '' + export HOME=$(mktemp -d) + ''; + + nativeBuildInputs = with python3.pkgs; [ + setuptools + wheel + ]; + + propagatedBuildInputs = with python3.pkgs; [ + asttokens + colorama + django + dnspython + esprima + func-timeout + github3-py + gitpython + networkx + protobuf + pyisemail + python-dateutil + python-gitlab + python-magic + pytz + pyyaml + rarfile + requests + six + tldextract + ]; + + pythonImportsCheck = [ + "packj" + ]; + + meta = with lib; { + description = "Tool to detect malicious/vulnerable open-source dependencies"; + homepage = "https://github.com/ossillate-inc/packj"; + changelog = "https://github.com/ossillate-inc/packj/releases/tag/v${version}"; + license = licenses.agpl3Only; + maintainers = with maintainers; [ fab ]; + mainProgram = "packj"; + }; +}