gemfilelint 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ed679ee045c3d39a031c54a7bc7b17a5912920975a46fbf4d8919a99c6216008
-  data.tar.gz: cdfd4a5b93dc1c6c2eee7917b11f3000e82f5604223cde31c067b5b433a33729
+  metadata.gz: 7d8e0cfea9a30da826eaea36ddea99897b725ab798c45f997fa1f94ad852cddc
+  data.tar.gz: e171f16a27d44cfb344d8a4828b6942e365bc885fe044f5101c9392aad566e63
 SHA512:
-  metadata.gz: be1de4b80eee06591d4bd0b85faf0ed50208f5d7f8de04f8dc7a95a339202629ce0bd5b0c81bee750581025bcdbabab1768afc307ac036c8e30c06f04ee2a433
-  data.tar.gz: 694bf077b0ef17a588bccb615ddce0ce865d6e1131fe01d20589a7098748d41c4fe170b22b83b532b2f3fce453b7eeefc535330c2468f8398c1f4eca8337924d
+  metadata.gz: 5e433200176ad6cdf3ca73cc52a2e30d2db5bb5b526531589690bcf26d795a46f18de26149571e8e6ffb1e76ffc7d1d91cde2eec39b633c643250b56896f07cb
+  data.tar.gz: 68e78aea3e2b81f07d27cd2f17a792b054df1c88a85d8d4fbeaac92d8d8d325fd54690d68e34c2f063752653e0255cb79b052a45fec4150d51f73a521b0a7f7a

data/CHANGELOG.md

@@ -6,6 +6,12 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) a
 
 ## [Unreleased]
 
+## [0.2.1] - 2020-02-24
+
+### Changed
+
+- Fix invocation when not specifying path to gemfile.
+
 ## [0.2.0] - 2020-02-20
 
 ### Added

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    gemfilelint (0.2.0)
+    gemfilelint (0.2.1)
       bundler
 
 GEM
@@ -14,7 +14,7 @@ GEM
     parser (2.7.0.2)
       ast (~> 2.4.0)
     rainbow (3.0.0)
-    rake (12.3.3)
+    rake (13.0.1)
     rexml (3.2.4)
     rubocop (0.80.0)
       jaro_winkler (~> 1.5.1)

data/README.md

@@ -1,6 +1,21 @@
 # Gemfile lint
 
-Lint your Gemfile! This will find common spelling mistakes in gems and remote sources so that you don't accidentally download code from places that you don't mean to.
+[![Build Status](https://github.com/kddeisz/gemfilelint/workflows/Main/badge.svg)](https://github.com/kddeisz/gemfilelint/actions)
+[![Gem Version](https://img.shields.io/gem/v/gemfilelint.svg)](https://github.com/kddeisz/gemfilelint)
+
+Lint your Gemfile! This will find common spelling mistakes in gems and remote sources so that you don't accidentally download code from places that you don't mean to. For example, if you have a Gemfile with the contents:
+
+```ruby
+source 'https://rubyems.org'
+
+gem 'rails'
+gem 'puma'
+gem 'pg'
+```
+
+You might not be able to see the immediate issue, but there's a typo in your source declaration. While this will generally be harmless, as it will likely error, it's also possible that someone could register that domain and provide gems with modified content to execute their own code on your production system.
+
+`gemfilelint` is a utility that you can run against your Gemfile that will check all of your listed sources against known trusted sources and all of your listed gems against the most commonly downloaded gems according to rubygems. This can give you some peace of mind that if you make a spelling mistake you won't accidentally open yourself up to RCE without knowing it.
 
 ## Installation
 
@@ -20,7 +35,7 @@ Or install it yourself as:
 
 ## Usage
 
-Run the `gemfilelint` executable either in the root of your repository that contains a Gemfile or specify a path to one.
+Run the `gemfilelint` executable either in the root of your repository that contains a Gemfile or specify a path to one or more Gemfile paths.
 
 ## Development
 

data/exe/gemfilelint

@@ -4,7 +4,7 @@
 $LOAD_PATH.unshift(File.expand_path(File.join('..', 'lib'), __dir__))
 require 'gemfilelint'
 
-gemfiles = ARGV.any? ? ARGV : './Gemfile'
+gemfiles = ARGV.any? ? ARGV : %w[./Gemfile]
 
 invalid = gemfiles.reject { |gemfile| File.file?(gemfile) }
 if invalid.any?

data/lib/gemfilelint/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Gemfilelint
-  VERSION = '0.2.0'
+  VERSION = '0.2.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gemfilelint
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Kevin Deisz
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-02-20 00:00:00.000000000 Z
+date: 2020-02-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler