gemsurance 0.8.0 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7b9561a163dcf3504a3893d428cbf75ad8ee3dc5
-  data.tar.gz: bff5ed8f6ed9c921079f872972b3f6d3cacf3704
+  metadata.gz: aa51dc5f780639e4388b6ddfc33b02adeca0e908
+  data.tar.gz: 8bc1c39a9ee890b4216cff7e8e744a0b56b215e9
 SHA512:
-  metadata.gz: f4ec81aa78ba0a40201bc1cd1e3c11f8a9254b453dd5bf86118a6ef1e3168eb88b3a7420126975a2523bdea7d58255c9fcf9a5543018d51e45ac915d74d44c2d
-  data.tar.gz: d63460b5caa5547153e2b8838dae80b5d788da603f72cf32e0dc8be4db7c383e7e9c210b898a6fef9b15ceef3915f66b485ab3c0c5c354106848808fcc68d866
+  metadata.gz: 1e53ef6dec18e7fffecf5858aefae5e326565837d7118575b587d38088859f23925168a38b8b5842680b52a4d6f9ef6c3742ef24b2659d5f8a3cbc53974dfaf6
+  data.tar.gz: c27a12763856711c38c225ddda3bdf57732ce8e68a9178a4c3b0e921b2a71f156f38fc5bb023028b02eed6b86323f2f5ff68a57441c4daa6b2fedd0812acead6

data/lib/gemsurance.rb

@@ -5,6 +5,7 @@ require 'gems'
 
 require 'gemsurance/gem_info_retriever'
 require 'gemsurance/formatters/base'
+require 'gemsurance/formatters/csv'
 require 'gemsurance/formatters/html'
 require 'gemsurance/formatters/yml'
 require 'gemsurance/runner'

data/lib/gemsurance/cli.rb

@@ -29,8 +29,12 @@ module Gemsurance
             options[:whitelist_file] = file
           end
 
-          opts.on("--format FORMAT", "Output report to given format (html & yml available). Html by default.") do |format|
+          opts.on("--format FORMAT", "Output report to given format (html, csv, and yml available). html by default.") do |format|
             options[:formatter] = format
+            unless %w(html csv yml).include?(options[:formatter])
+              puts "Invalid formatter. Possible values are html, csv, and yml."
+              exit 1
+            end
           end
 
           opts.on_tail("-h", "--help", "Show this help") do

data/lib/gemsurance/formatters/csv.rb

@@ -0,0 +1,19 @@
+require 'csv'
+module Gemsurance
+  module Formatters
+    class Csv < Base
+      def format
+        @extension = "csv"
+
+        file = ""
+        title_attributes = GemInfoRetriever::GemInfo::GEM_ATTRIBUTES.map {|attr| attr.to_s }
+        file << CSV.generate_line(title_attributes)
+
+        sorted_gems.each do |gem|
+          file << gem.to_csv
+        end
+        file
+      end
+    end
+  end
+end

data/lib/gemsurance/formatters/yml.rb

@@ -3,7 +3,13 @@ module Gemsurance
     class Yml < Base
       def format
         @extension = "yml"
-        ERB.new(File.read(output_path), nil, '-').result(binding)
+        gem_hash = {}
+
+        sorted_gems.each do |gem_info|
+          gem_hash[gem_info.name] = gem_info.to_hash
+        end
+
+        gem_hash.to_yaml
       end
     end
   end

data/lib/gemsurance/gem_info_retriever.rb

@@ -1,13 +1,16 @@
+require 'json'
+
 module Gemsurance
   class GemInfoRetriever
     class GemInfo
+      GEM_ATTRIBUTES = [:name, :current_version, :newest_version, :in_gem_file, :homepage_uri, :source_code_uri, :documentation_uri, :status, :vulnerabilities]
       STATUS_OUTDATED   = 'outdated'
       STATUS_CURRENT    = 'current'
       STATUS_VULNERABLE = 'vulnerable'
-      
+
       attr_reader :name, :current_version, :newest_version, :in_gem_file, :vulnerabilities,
-                  :homepage_uri, :source_code_uri, :documentation_uri
-      
+                  :homepage_uri, :source_code_uri, :documentation_uri, :status
+
       def initialize(name, current_version, newest_version, in_gem_file, homepage_uri, source_code_uri, documentation_uri, status = STATUS_CURRENT)
         @name = name
         @current_version = current_version
@@ -18,22 +21,21 @@ module Gemsurance
         @source_code_uri = source_code_uri
         @status = status
         @vulnerabilities = []
-        
       end
-      
+
       def add_vulnerability!(vulnerability)
         @status = STATUS_VULNERABLE
         @vulnerabilities << vulnerability
       end
-      
+
       def outdated?
         @status == STATUS_OUTDATED
       end
-      
+
       def current?
         @status == STATUS_CURRENT
       end
-      
+
       def vulnerable?
         @status == STATUS_VULNERABLE
       end
@@ -45,17 +47,77 @@ module Gemsurance
           @status == other.instance_variable_get(:@status) &&
           @vulnerabilities == other.vulnerabilities
       end
+
+      def to_csv
+        formatted_values.to_csv
+      end
+
+      def to_hash
+        {
+          'in_gem_file' =>  in_gem_file,
+          'bundle_version' =>  current_version.to_s,
+          'newest_version' =>  newest_version.to_s,
+          'status' => human_status,
+          'homepage_url' =>  homepage_uri,
+          'source_code_url' =>  source_code_uri,
+          'documentation_url' =>  documentation_uri,
+          'vulnerabilities' => vulns_to_hash
+        }
+      end
+
+      private
+
+      def formatted_values
+        GEM_ATTRIBUTES.map do |attr|
+          if attr == :vulnerabilities
+            if @vulnerabilities.empty?
+              ''
+            else
+              @vulnerabilities.map { |vuln| vuln.attributes }.to_json
+            end
+          elsif attr == :status
+            human_status
+          else
+            self.send(attr).to_s
+          end
+        end
+      end
+
+      def human_status
+        if vulnerable?
+          return 'vulnerable'
+        elsif outdated?
+          return 'outofdate'
+        elsif current?
+          return 'uptodate'
+        else
+          return 'unknown'
+        end
+      end
+
+      def vulns_to_hash
+        return nil if vulnerabilities.empty?
+
+        vulnerabilities.map do |vulnerability|
+          {
+            'title' => vulnerability.title,
+            'cve' =>  vulnerability.cve,
+            'url' =>  vulnerability.url,
+            'patched_versions' =>  (vulnerability.patched_versions || []).join(', ')
+          }
+        end
+      end
     end
-    
+
     def initialize(specs, dependencies, bundle_definition)
       @specs = specs
       @dependencies = dependencies
       @bundle_definition = bundle_definition
     end
-    
+
     def retrieve(options = {})
       gem_infos = []
-      
+
       @specs.each do |current_spec|
         active_spec = @bundle_definition.index[current_spec.name].sort_by { |b| b.version }
 

data/lib/gemsurance/version.rb

@@ -1,3 +1,3 @@
 module Gemsurance
-  VERSION = '0.8.0'
-end
+  VERSION = '0.9.0'
+end

data/lib/gemsurance/vulnerability.rb

@@ -20,4 +20,4 @@ module Gemsurance
       @attributes == other.attributes
     end
   end
-end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gemsurance
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.9.0
 platform: ruby
 authors:
 - Jon Kessler
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-03-03 00:00:00.000000000 Z
+date: 2017-06-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -119,12 +119,12 @@ files:
 - lib/gemsurance.rb
 - lib/gemsurance/cli.rb
 - lib/gemsurance/formatters/base.rb
+- lib/gemsurance/formatters/csv.rb
 - lib/gemsurance/formatters/html.rb
 - lib/gemsurance/formatters/yml.rb
 - lib/gemsurance/gem_info_retriever.rb
 - lib/gemsurance/runner.rb
 - lib/gemsurance/templates/output.html.erb
-- lib/gemsurance/templates/output.yml.erb
 - lib/gemsurance/version.rb
 - lib/gemsurance/vulnerability.rb
 homepage: http://github.com/appfolio/gemsurance
@@ -147,7 +147,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 1.8.11
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.2
+rubygems_version: 2.6.12
 signing_key: 
 specification_version: 4
 summary: Your Gem Insurance Policy

data/lib/gemsurance/templates/output.yml.erb

@@ -1,25 +0,0 @@
-<%- sorted_gems.each do |gem_info| -%>
-<%= gem_info.name %>:
-  in_gem_file: <%= gem_info.in_gem_file %>
-  bundle_version: <%= gem_info.current_version %>
-  newest_version: <%= gem_info.newest_version %>
-  <%- if gem_info.vulnerable? -%>
-  status: vulnerable
-  <%- elsif gem_info.outdated? -%>
-  status: outofdate
-  <%- elsif gem_info.current? -%>
-  status: uptodate
-  <%- else -%>
-  status: unknown
-  <%- end -%>
-  vulnerabilities:
-  <%- gem_info.vulnerabilities.each do |vulnerability| -%>
-    - title: '<%= vulnerability.title %>'
-      cve: <%= vulnerability.cve %>
-      url: <%= vulnerability.url %>
-      patched_versions: <%= (vulnerability.patched_versions || []).join(', ') %>
-  <%- end -%>
-  homepage_url: <%= gem_info.homepage_uri %>
-  source_code_url: <%= gem_info.source_code_uri %>
-  documentation_url: <%= gem_info.documentation_uri %>
-<%- end -%>