safedep 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: f1cb012ac2d4a305d3336571face073efbb280cb
+  data.tar.gz: 0869786aa9865ba2b5c0e0244bb1b1c5c9dcf4f9
+SHA512:
+  metadata.gz: b0758ba09057c0dbdd8f1bb469f4acb38b92b6dcab88d22b9be1b51557c54126df2a3f1ef5ebd3ad93cb2a0fb5151e5334795fb964c351aaef0dbe6f5d22d0d3
+  data.tar.gz: 0f6f50bfd5adc9aed4ed7cf266131b1b7d53323e6e02d79376ce711f08f16e41ed4b22111677634842b226e4c6ba85db2ae4e4b3af02da0512abfaa5c0f0ec2b

data/.gitignore

@@ -0,0 +1,14 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+*.bundle
+*.so
+*.o
+*.a
+mkmf.log

data/.rspec

@@ -0,0 +1,2 @@
+--color
+--require spec_helper

data/.rubocop.yml

@@ -0,0 +1,55 @@
+
+AllCops:
+  Include:
+    - '*.gemspec'
+    - 'Rakefile'
+    - 'Gemfile'
+    - 'Guardfile'
+  Exclude:
+    - 'vendor/**/*'
+
+LineLength:
+  Max: 100
+
+MethodLength:
+  Max: 15
+
+RegexpLiteral:
+  Exclude:
+    - '*.gemspec'
+    - 'Guardfile'
+
+EmptyElse:
+  Enabled: false
+
+AlignHash:
+  # Alignment of entries using hash rocket as separator. Valid values are:
+  #
+  # key - left alignment of keys
+  #   'a' => 2
+  #   'bb' => 3
+  # separator - alignment of hash rockets, keys are right aligned
+  #    'a' => 2
+  #   'bb' => 3
+  # table - left alignment of keys, hash rockets, and values
+  #   'a'  => 2
+  #   'bb' => 3
+  EnforcedHashRocketStyle: table
+  # Alignment of entries using colon as separator. Valid values are:
+  #
+  # key - left alignment of keys
+  #   a: 0
+  #   bb: 1
+  # separator - alignment of colons, keys are right aligned
+  #    a: 0
+  #   bb: 1
+  # table - left alignment of keys and values
+  #   a:  0
+  #   bb: 1
+  EnforcedColonStyle: separator
+
+GuardClause:
+  Enabled: false
+
+Documentation:
+  Enabled: false

data/.travis.yml

@@ -0,0 +1,11 @@
+language: ruby
+rvm:
+  - 1.9.3
+  - 2.0.0
+  - 2.1
+  - 2.2
+  - ruby-head
+  - jruby-19mode
+script: bundle exec rake ci
+sudo: false
+cache: bundler

data/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+## Development
+
+## v0.0.1
+
+* Initial release.

data/Gemfile

@@ -0,0 +1,16 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in safedep.gemspec
+gemspec
+
+group :development, :test do
+  gem 'rake', '~> 10.4'
+  gem 'rspec', '~> 3.1'
+  gem 'rubocop', '~> 0.28'
+  gem 'powerpack', '~> 0.0'
+  gem 'simplecov', '~> 0.9'
+end
+
+group :test do
+  gem 'coveralls', '~> 0.7'
+end

data/LICENSE.txt

@@ -0,0 +1,22 @@
+Copyright (c) 2015 Yuji Nakayama
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,86 @@
+[![Gem Version](http://img.shields.io/gem/v/safedep.svg?style=flat)](http://badge.fury.io/rb/safedep)
+[![Dependency Status](http://img.shields.io/gemnasium/yujinakayama/safedep.svg?style=flat)](https://gemnasium.com/yujinakayama/safedep)
+[![Build Status](https://travis-ci.org/yujinakayama/safedep.svg?branch=master&style=flat)](https://travis-ci.org/yujinakayama/safedep)
+[![Coverage Status](http://img.shields.io/coveralls/yujinakayama/safedep/master.svg?style=flat)](https://coveralls.io/r/yujinakayama/safedep)
+[![Code Climate](https://img.shields.io/codeclimate/github/yujinakayama/safedep.svg?style=flat)](https://codeclimate.com/github/yujinakayama/safedep)
+
+# Safedep
+
+**safedep** automatically writes missing version specifiers for dependencies in your `Gemfile`.
+
+## Installation
+
+```bash
+$ gem install safedep
+```
+
+## Usage
+
+Just run `safedep` command in your project's root directory,
+and then you should see the `Gemfile` is modified.
+
+```bash
+$ cd your-project
+$ safedep
+```
+
+## Example
+
+Here's a `Gemfile` with dependencies without version specifier:
+
+```bash
+$ cat Gemfile
+source 'https://rubygems.org'
+
+group :development, :test do
+  gem 'rake'
+  gem 'rspec'
+  gem 'rubocop'
+end
+```
+
+And they have already been installed via `bundle install`:
+
+```bash
+$ egrep '(rake|rspec|rubocop) ' Gemfile.lock
+    rake (10.4.2)
+    rspec (3.1.0)
+    rubocop (0.28.0)
+```
+
+Then run `safedep`:
+
+```bash
+$ safedep
+```
+
+Now the `Gemfile` should have safe version specifiers in the SemVer way:
+
+```bash
+$ git diff
+diff --git a/Gemfile b/Gemfile
+index 5ff2c3c..488dd41 100644
+--- a/Gemfile
++++ b/Gemfile
+@@ -1,7 +1,7 @@
+ source 'https://rubygems.org'
+
+ group :development, :test do
+-  gem 'rake'
+-  gem 'rspec'
+-  gem 'rubocop'
++  gem 'rake', '~> 10.4'
++  gem 'rspec', '~> 3.1'
++  gem 'rubocop', '~> 0.28'
+ end
+```
+
+## Compatibility
+
+Tested on MRI 1.9.3, 2.0, 2.1, 2.2 and JRuby in 1.9 mode.
+
+## License
+
+Copyright (c) 2015 Yuji Nakayama
+
+See the [LICENSE.txt](LICENSE.txt) for details.

data/Rakefile

@@ -0,0 +1,12 @@
+require 'bundler/setup'
+require 'bundler/gem_tasks'
+require 'rspec/core/rake_task'
+require 'rubocop/rake_task'
+
+RSpec::Core::RakeTask.new(:spec) do |task|
+  task.verbose = false
+end
+
+RuboCop::RakeTask.new(:style)
+
+task ci: [:spec, :style]

data/bin/safedep

@@ -0,0 +1,6 @@
+#!/usr/bin/env ruby
+
+$LOAD_PATH.unshift(File.expand_path('../../lib', __FILE__))
+require 'safedep/runner'
+
+Safedep::Runner.run

data/lib/safedep/abstract_dependency.rb

@@ -0,0 +1,60 @@
+module Safedep
+  class AbstractDependency
+    attr_reader :node, :rewriter
+
+    def self.valid_node?(node)
+      return false unless node.send_type?
+      _receiver_node, message, name_node, = *node
+      method_names.include?(message) && name_node.str_type?
+    end
+
+    def self.method_names
+      fail NotImplemenetedError
+    end
+
+    def initialize(node, rewriter)
+      fail 'Invalid node.' unless self.class.valid_node?(node)
+      @node = node
+      @rewriter = rewriter
+    end
+
+    def name
+      name_node.children.first
+    end
+
+    def version_specifier
+      return nil unless version_specifier_node
+      version_specifier_node.children.first
+    end
+
+    def version_specifier=(version_specifier)
+      if version_specifier_node
+        rewriter.replace(content_range_of_str_node(version_specifier_node), version_specifier)
+      else
+        rewriter.insert_after(name_node.loc.expression, ", '#{version_specifier}'")
+      end
+    end
+
+    private
+
+    def name_node
+      node.children[2]
+    end
+
+    def version_specifier_node
+      return @version_specifier_node if instance_variable_defined?(:@version_specifier_node)
+      version_node = node.children[3]
+      return @version_specifier_node = nil if version_node.nil? || !version_node.str_type?
+      @version_specifier_node = version_node
+    end
+
+    def content_range_of_str_node(str_node)
+      map = str_node.loc
+      Parser::Source::Range.new(
+        map.expression.source_buffer,
+        map.begin.end_pos,
+        map.end.begin_pos
+      )
+    end
+  end
+end

data/lib/safedep/abstract_gemfile.rb

@@ -0,0 +1,50 @@
+require 'astrolabe/builder'
+require 'parser/current'
+
+module Safedep
+  class AbstractGemfile
+    attr_reader :path
+
+    def initialize(path)
+      @path = path
+    end
+
+    def find_dependency(name)
+      dependencies.find { |dep| dep.name == name }
+    end
+
+    def dependencies
+      @dependencies ||= ast.each_node.with_object([]) do |node, dependencies|
+        next unless dependency_class.valid_node?(node)
+        dependencies << dependency_class.new(node, source_rewriter)
+      end
+    end
+
+    def rewrite!
+      rewritten_source = source_rewriter.process
+      File.write(path, rewritten_source)
+    end
+
+    private
+
+    def dependency_class
+      fail NotImplementedError
+    end
+
+    def ast
+      @ast ||= begin
+        builder = Astrolabe::Builder.new
+        parser = Parser::CurrentRuby.new(builder)
+        parser.parse(source_buffer)
+      end
+    end
+
+    def source_rewriter
+      @source_rewriter ||= Parser::Source::Rewriter.new(source_buffer)
+    end
+
+    def source_buffer
+      @source_buffer ||= Parser::Source::Buffer.new(path).read
+    end
+  end
+end

data/lib/safedep/gemfile/dependency.rb

@@ -0,0 +1,13 @@
+require 'safedep/abstract_dependency'
+
+module Safedep
+  class Gemfile
+    class Dependency < AbstractDependency
+      METHOD_NAMES = [:gem].freeze
+
+      def self.method_names
+        METHOD_NAMES
+      end
+    end
+  end
+end

data/lib/safedep/gemfile.rb

@@ -0,0 +1,13 @@
+require 'safedep/abstract_gemfile'
+
+module Safedep
+  class Gemfile < AbstractGemfile
+    require 'safedep/gemfile/dependency'
+
+    private
+
+    def dependency_class
+      Gemfile::Dependency
+    end
+  end
+end

data/lib/safedep/gemfile_lock.rb

@@ -0,0 +1,28 @@
+require 'bundler'
+
+module Safedep
+  class GemfileLock
+    attr_reader :path
+
+    def initialize(path)
+      @path = path
+    end
+
+    def find_dependency(name)
+      dependencies.find { |dep| dep.name == name }
+    end
+
+    def dependencies
+      lockfile.specs
+    end
+
+    private
+
+    def lockfile
+      @lockfile ||= begin
+        content = File.read(path)
+        Bundler::LockfileParser.new(content)
+      end
+    end
+  end
+end

data/lib/safedep/gemspec/dependency.rb

@@ -0,0 +1,13 @@
+require 'safedep/abstract_dependency'
+
+module Safedep
+  class Gemspec
+    class Dependency < AbstractDependency
+      METHOD_NAMES = [:add_runtime_dependency, :add_development_dependency, :add_dependency].freeze
+
+      def self.method_names
+        METHOD_NAMES
+      end
+    end
+  end
+end

data/lib/safedep/gemspec.rb

@@ -0,0 +1,13 @@
+require 'safedep/abstract_gemfile'
+
+module Safedep
+  class Gemspec < AbstractGemfile
+    require 'safedep/gemspec/dependency'
+
+    private
+
+    def dependency_class
+      Gemspec::Dependency
+    end
+  end
+end

data/lib/safedep/runner.rb

@@ -0,0 +1,46 @@
+require 'safedep/gemspec'
+require 'safedep/gemfile'
+require 'safedep/gemfile_lock'
+
+module Safedep
+  class Runner
+    def self.run
+      new.run
+    end
+
+    def run
+      dependencies = gemfiles.map(&:dependencies).reduce(:+)
+
+      dependencies.each do |dep|
+        next if dep.version_specifier
+        lockfile_dep = gemfile_lock.find_dependency(dep.name)
+        dep.version_specifier = safe_version_specifier(lockfile_dep.version)
+      end
+
+      gemfiles.each(&:rewrite!)
+    end
+
+    def gemfiles
+      @gemfiles ||= [gemspec, gemfile].compact
+    end
+
+    def gemspec
+      @gemspec ||= begin
+        path = Dir['*.gemspec'].first
+        Gemspec.new(path) if path
+      end
+    end
+
+    def gemfile
+      @gemfile ||= Gemfile.new('Gemfile')
+    end
+
+    def gemfile_lock
+      @gemfile_lock ||= GemfileLock.new('Gemfile.lock')
+    end
+
+    def safe_version_specifier(version)
+      '~> ' << version.to_s.split('.').first(2).join('.')
+    end
+  end
+end

data/lib/safedep/version.rb

@@ -0,0 +1,12 @@
+module Safedep
+  # http://semver.org/
+  module Version
+    MAJOR = 0
+    MINOR = 0
+    PATCH = 1
+
+    def self.to_s
+      [MAJOR, MINOR, PATCH].join('.')
+    end
+  end
+end

data/lib/safedep.rb

@@ -0,0 +1,5 @@
+require 'safedep/version'
+
+module Safedep
+  # Your code goes here...
+end

data/safedep.gemspec

@@ -0,0 +1,25 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'safedep/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'safedep'
+  spec.version       = Safedep::Version.to_s
+  spec.authors       = ['Yuji Nakayama']
+  spec.email         = ['nkymyj@gmail.com']
+  spec.summary       = 'Make your Gemfile safe by adding dependency version specifiers ' \
+                       'automatically.'
+  spec.description   = spec.summary
+  spec.homepage      = 'https://github.com/yujinakayama/safedep'
+  spec.license       = 'MIT'
+
+  spec.files         = `git ls-files -z`.split("\x0")
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ['lib']
+
+  spec.add_runtime_dependency 'parser', '~> 2.2'
+  spec.add_runtime_dependency 'astrolabe', '~> 1.3'
+  spec.add_runtime_dependency 'bundler', '~> 1.7'
+end

data/spec/safedep/gemfile/dependency_spec.rb

@@ -0,0 +1,133 @@
+require 'safedep/gemfile'
+
+module Safedep
+  class Gemfile
+    describe Dependency do
+      include FileHelper
+      include_context 'isolated environment'
+
+      let(:gemfile) do
+        create_file(path, source)
+        Gemfile.new(path)
+      end
+
+      let(:path) { 'Gemfile' }
+
+      let(:source) { <<-END.strip_indent }
+        source 'https://rubygems.org'
+
+        gemspec
+
+        group :development, :test do
+          gem 'rake'
+          gem 'rspec', '~> 3.1'
+          gem 'rubocop', require: false
+        end
+      END
+
+      describe '#name' do
+        let(:dependency) { gemfile.dependencies.first }
+
+        it 'returns the name of the gem' do
+          expect(dependency.name).to eq('rake')
+        end
+      end
+
+      describe '#version_specifier' do
+        subject(:version_specifier) { dependency.version_specifier }
+
+        context 'when the dependency has version specifier' do
+          let(:dependency) { gemfile.find_dependency('rspec') }
+
+          it 'returns the specifier' do
+            expect(version_specifier).to eq('~> 3.1')
+          end
+        end
+
+        context 'when the dependency has no version specifier' do
+          context 'and has no options' do
+            let(:dependency) { gemfile.find_dependency('rake') }
+            it { should be_nil }
+          end
+
+          context 'but has options' do
+            let(:dependency) { gemfile.find_dependency('rubocop') }
+            it { should be_nil }
+          end
+        end
+      end
+
+      describe '#version_specifier=' do
+        let(:rewritten_source) { File.read(gemfile.path) }
+
+        context 'when the dependency has version specifier' do
+          let(:dependency) { gemfile.find_dependency('rspec') }
+
+          let(:expected_source) { <<-END.strip_indent }
+            source 'https://rubygems.org'
+
+            gemspec
+
+            group :development, :test do
+              gem 'rake'
+              gem 'rspec', '> 4.0'
+              gem 'rubocop', require: false
+            end
+          END
+
+          it 'replaces the existing specifier with the passed specifier' do
+            dependency.version_specifier = '> 4.0'
+            gemfile.rewrite!
+            expect(rewritten_source).to eq(expected_source)
+          end
+        end
+
+        context 'when the dependency has no version specifier' do
+          context 'and has no options' do
+            let(:dependency) { gemfile.find_dependency('rake') }
+
+            let(:expected_source) { <<-END.strip_indent }
+              source 'https://rubygems.org'
+
+              gemspec
+
+              group :development, :test do
+                gem 'rake', '~> 10.1'
+                gem 'rspec', '~> 3.1'
+                gem 'rubocop', require: false
+              end
+            END
+
+            it 'adds the passed specifier' do
+              dependency.version_specifier = '~> 10.1'
+              gemfile.rewrite!
+              expect(rewritten_source).to eq(expected_source)
+            end
+          end
+
+          context 'but has options' do
+            let(:dependency) { gemfile.find_dependency('rubocop') }
+
+            let(:expected_source) { <<-END.strip_indent }
+              source 'https://rubygems.org'
+
+              gemspec
+
+              group :development, :test do
+                gem 'rake'
+                gem 'rspec', '~> 3.1'
+                gem 'rubocop', '~> 0.28', require: false
+              end
+            END
+
+            it 'adds the passed specifier' do
+              dependency.version_specifier = '~> 0.28'
+              gemfile.rewrite!
+              expect(rewritten_source).to eq(expected_source)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/spec/safedep/gemfile_lock_spec.rb

@@ -0,0 +1,81 @@
+require 'safedep/gemfile_lock'
+
+module Safedep
+  describe GemfileLock do
+    include FileHelper
+    include_context 'isolated environment'
+
+    let(:lockfile) do
+      create_file(path, source)
+      GemfileLock.new(path)
+    end
+
+    let(:path) { 'Gemfile.lock' }
+
+    let(:source) { <<-END.strip_indent }
+      PATH
+        remote: .
+        specs:
+          safedep (0.0.1)
+            astrolabe
+            bundler (~> 1.7)
+            parser
+
+      GEM
+        remote: https://rubygems.org/
+        specs:
+          ast (2.0.0)
+          astrolabe (1.3.0)
+            parser (>= 2.2.0.pre.3, < 3.0)
+          diff-lcs (1.2.5)
+          parser (2.2.0.2)
+            ast (>= 1.1, < 3.0)
+          powerpack (0.0.9)
+          rainbow (2.0.0)
+          rake (10.4.2)
+          rspec (3.1.0)
+            rspec-core (~> 3.1.0)
+            rspec-expectations (~> 3.1.0)
+            rspec-mocks (~> 3.1.0)
+          rspec-core (3.1.7)
+            rspec-support (~> 3.1.0)
+          rspec-expectations (3.1.2)
+            diff-lcs (>= 1.2.0, < 2.0)
+            rspec-support (~> 3.1.0)
+          rspec-mocks (3.1.3)
+            rspec-support (~> 3.1.0)
+          rspec-support (3.1.2)
+          rubocop (0.28.0)
+            astrolabe (~> 1.3)
+            parser (>= 2.2.0.pre.7, < 3.0)
+            powerpack (~> 0.0.6)
+            rainbow (>= 1.99.1, < 3.0)
+            ruby-progressbar (~> 1.4)
+          ruby-progressbar (1.7.1)
+
+      PLATFORMS
+        ruby
+
+      DEPENDENCIES
+        rake (~> 10.4)
+        rspec (~> 3.1)
+        rubocop (~> 0.28)
+        safedep!
+    END
+
+    describe '#find_dependency' do
+      it 'returns the dependency matching the passed name' do
+        dependency = lockfile.find_dependency('rspec')
+        expect(dependency.name).to eq('rspec')
+      end
+    end
+
+    describe '#dependencies' do
+      let(:dep_names) { lockfile.dependencies.map(&:name) }
+
+      it 'returns an array of the specifications' do
+        expect(dep_names).to include('rake', 'rspec', 'rubocop')
+      end
+    end
+  end
+end

data/spec/safedep/gemfile_spec.rb

@@ -0,0 +1,41 @@
+require 'safedep/gemfile'
+
+module Safedep
+  describe Gemfile do
+    include FileHelper
+    include_context 'isolated environment'
+
+    subject(:gemfile) do
+      create_file(path, source)
+      Gemfile.new(path)
+    end
+
+    let(:path) { 'Gemfile' }
+
+    let(:source) { <<-END.strip_indent }
+      source 'https://rubygems.org'
+
+      gemspec
+
+      group :development, :test do
+        gem 'rake'
+        gem 'rspec', '~> 3.1'
+        gem 'rubocop', '~> 0.28'
+      end
+    END
+
+    describe '#find_dependency' do
+      it 'returns the dependency matching the passed name' do
+        dependency = gemfile.find_dependency('rspec')
+        expect(dependency.name).to eq('rspec')
+      end
+    end
+
+    describe '#dependencies' do
+      it 'returns an array of the dependencies' do
+        expect(gemfile.dependencies.size).to eq(3)
+        expect(gemfile.dependencies).to all be_a(Gemfile::Dependency)
+      end
+    end
+  end
+end

data/spec/safedep/gemspec/dependency_spec.rb

@@ -0,0 +1,93 @@
+require 'safedep/gemspec'
+
+module Safedep
+  class Gemspec
+    describe Dependency do
+      include FileHelper
+      include_context 'isolated environment'
+
+      let(:gemspec) do
+        create_file(path, source)
+        Gemspec.new(path)
+      end
+
+      let(:path) { 'example.gemspec' }
+
+      let(:source) { <<-END.strip_indent }
+        Gem::Specification.new do |spec|
+          spec.name = 'safedep'
+          spec.add_dependency 'parser'
+          spec.add_runtime_dependency 'astrolabe', '~> 1.3'
+          spec.add_development_dependency 'rspec', '~> 3.1'
+        end
+      END
+
+      describe '#name' do
+        let(:dependency) { gemspec.dependencies.first }
+
+        it 'returns the name of the gem' do
+          expect(dependency.name).to eq('parser')
+        end
+      end
+
+      describe '#version_specifier' do
+        subject(:version_specifier) { dependency.version_specifier }
+
+        context 'when the dependency has version specifier' do
+          let(:dependency) { gemspec.find_dependency('rspec') }
+
+          it 'returns the specifier' do
+            expect(version_specifier).to eq('~> 3.1')
+          end
+        end
+
+        context 'when the dependency has no version specifier' do
+          let(:dependency) { gemspec.find_dependency('parser') }
+          it { should be_nil }
+        end
+      end
+
+      describe '#version_specifier=' do
+        let(:rewritten_source) { File.read(gemspec.path) }
+
+        context 'when the dependency has version specifier' do
+          let(:dependency) { gemspec.find_dependency('rspec') }
+
+          let(:expected_source) { <<-END.strip_indent }
+            Gem::Specification.new do |spec|
+              spec.name = 'safedep'
+              spec.add_dependency 'parser'
+              spec.add_runtime_dependency 'astrolabe', '~> 1.3'
+              spec.add_development_dependency 'rspec', '> 4.0'
+            end
+          END
+
+          it 'replaces the existing specifier with the passed specifier' do
+            dependency.version_specifier = '> 4.0'
+            gemspec.rewrite!
+            expect(rewritten_source).to eq(expected_source)
+          end
+        end
+
+        context 'when the dependency has no version specifier' do
+          let(:dependency) { gemspec.find_dependency('parser') }
+
+          let(:expected_source) { <<-END.strip_indent }
+            Gem::Specification.new do |spec|
+              spec.name = 'safedep'
+              spec.add_dependency 'parser', '~> 2.2'
+              spec.add_runtime_dependency 'astrolabe', '~> 1.3'
+              spec.add_development_dependency 'rspec', '~> 3.1'
+            end
+          END
+
+          it 'adds the passed specifier' do
+            dependency.version_specifier = '~> 2.2'
+            gemspec.rewrite!
+            expect(rewritten_source).to eq(expected_source)
+          end
+        end
+      end
+    end
+  end
+end

data/spec/safedep/gemspec_spec.rb

@@ -0,0 +1,38 @@
+require 'safedep/gemspec'
+
+module Safedep
+  describe Gemspec do
+    include FileHelper
+    include_context 'isolated environment'
+
+    subject(:gemspec) do
+      create_file(path, source)
+      Gemspec.new(path)
+    end
+
+    let(:path) { 'example.gemspec' }
+
+    let(:source) { <<-END.strip_indent }
+      Gem::Specification.new do |spec|
+        spec.name = 'safedep'
+        spec.add_dependency 'parser'
+        spec.add_runtime_dependency 'astrolabe', '~> 1.3'
+        spec.add_development_dependency 'rspec', '~> 3.1'
+      end
+    END
+
+    describe '#find_dependency' do
+      it 'returns the dependency matching the passed name' do
+        dependency = gemspec.find_dependency('rspec')
+        expect(dependency.name).to eq('rspec')
+      end
+    end
+
+    describe '#dependencies' do
+      it 'returns an array of the dependencies' do
+        expect(gemspec.dependencies.size).to eq(3)
+        expect(gemspec.dependencies).to all be_a(Gemspec::Dependency)
+      end
+    end
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,108 @@
+require 'powerpack/string/strip_indent'
+
+# This file was generated by the `rspec --init` command. Conventionally, all
+# specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
+# The generated `.rspec` file contains `--require spec_helper` which will cause this
+# file to always be loaded, without a need to explicitly require it in any files.
+#
+# Given that it is always loaded, you are encouraged to keep this file as
+# light-weight as possible. Requiring heavyweight dependencies from this file
+# will add to the boot time of your test suite on EVERY test run, even for an
+# individual file that may not need all of that loaded. Instead, consider making
+# a separate helper file that requires the additional dependencies and performs
+# the additional setup, and require it from the spec files that actually need it.
+#
+# The `.rspec` file also contains a few flags that are not defaults but that
+# users commonly want.
+#
+# See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
+RSpec.configure do |config|
+  # rspec-expectations config goes here. You can use an alternate
+  # assertion/expectation library such as wrong or the stdlib/minitest
+  # assertions if you prefer.
+  config.expect_with :rspec do |expectations|
+    expectations.syntax = :expect
+    # This option will default to `true` in RSpec 4. It makes the `description`
+    # and `failure_message` of custom matchers include text for helper methods
+    # defined using `chain`, e.g.:
+    # be_bigger_than(2).and_smaller_than(4).description
+    #   # => "be bigger than 2 and smaller than 4"
+    # ...rather than:
+    #   # => "be bigger than 2"
+    expectations.include_chain_clauses_in_custom_matcher_descriptions = true
+  end
+
+  # rspec-mocks config goes here. You can use an alternate test double
+  # library (such as bogus or mocha) by changing the `mock_with` option here.
+  config.mock_with :rspec do |mocks|
+    mocks.syntax = :expect
+
+    # Prevents you from mocking or stubbing a method that does not exist on
+    # a real object. This is generally recommended, and will default to
+    # `true` in RSpec 4.
+    mocks.verify_partial_doubles = true
+  end
+
+  # These two settings work together to allow you to limit a spec run
+  # to individual examples or groups you care about by tagging them with
+  # `:focus` metadata. When nothing is tagged with `:focus`, all examples
+  # get run.
+  config.filter_run :focus
+  config.run_all_when_everything_filtered = true
+
+  # Limits the available syntax to the non-monkey patched syntax that is recommended.
+  # For more details, see:
+  #   - http://myronmars.to/n/dev-blog/2012/06/rspecs-new-expectation-syntax
+  #   - http://teaisaweso.me/blog/2013/05/27/rspecs-new-message-expectation-syntax/
+  #   - http://myronmars.to/n/dev-blog/2014/05/notable-changes-in-rspec-3#new__config_option_to_disable_rspeccore_monkey_patching
+  # config.disable_monkey_patching!
+
+  # This setting enables warnings. It's recommended, but in some cases may
+  # be too noisy due to issues in dependencies.
+  # config.warnings = true
+
+  # Many RSpec users commonly either run the entire suite or an individual
+  # file, and it's useful to allow more verbose output when running an
+  # individual spec file.
+  if config.files_to_run.one?
+    # Use the documentation formatter for detailed output,
+    # unless a formatter has already been configured
+    # (e.g. via a command-line flag).
+    config.default_formatter = 'doc'
+  end
+
+  # Print the 10 slowest examples and example groups at the
+  # end of the spec run, to help surface which specs are running
+  # particularly slow.
+  # config.profile_examples = 10
+
+  # Run specs in random order to surface order dependencies. If you find an
+  # order dependency and want to debug it, you can fix the order by providing
+  # the seed, which is printed after each run.
+  #     --seed 1234
+  config.order = :random
+
+  # Seed global randomization in this process using the `--seed` CLI option.
+  # Setting this allows you to use `--seed` to deterministically reproduce
+  # test failures related to randomization by passing the same `--seed` value
+  # as the one that triggered the failure.
+  Kernel.srand config.seed
+end
+
+Dir[File.join(File.dirname(__FILE__), 'support', '*')].each do |path|
+  require path
+end
+
+if ENV['TRAVIS'] || ENV['COVERAGE']
+  require 'simplecov'
+
+  if ENV['TRAVIS']
+    require 'coveralls'
+    SimpleCov.formatter = Coveralls::SimpleCov::Formatter
+  end
+
+  SimpleCov.start do
+    add_filter '/spec/'
+    add_filter '/vendor/'
+  end
+end

data/spec/support/file_helper.rb

@@ -0,0 +1,22 @@
+module FileHelper
+  module_function
+
+  def create_file(file_path, content)
+    require 'fileutils'
+
+    file_path = File.expand_path(file_path)
+    dir_path = File.dirname(file_path)
+    FileUtils.makedirs(dir_path) unless File.exist?(dir_path)
+
+    File.open(file_path, 'w') do |file|
+      case content
+      when String
+        file.puts content
+      when Array
+        file.puts content.join("\n")
+      else
+        fail 'Unsupported type!'
+      end
+    end
+  end
+end

data/spec/support/shared_contexts.rb

@@ -0,0 +1,11 @@
+
+shared_context 'isolated environment' do
+  around do |example|
+    require 'tmpdir'
+    Dir.mktmpdir do |tmpdir|
+      Dir.chdir(tmpdir) do
+        example.run
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,124 @@
+--- !ruby/object:Gem::Specification
+name: safedep
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Yuji Nakayama
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-01-10 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: parser
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+- !ruby/object:Gem::Dependency
+  name: astrolabe
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+description: Make your Gemfile safe by adding dependency version specifiers automatically.
+email:
+- nkymyj@gmail.com
+executables:
+- safedep
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- ".rubocop.yml"
+- ".travis.yml"
+- CHANGELOG.md
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/safedep
+- lib/safedep.rb
+- lib/safedep/abstract_dependency.rb
+- lib/safedep/abstract_gemfile.rb
+- lib/safedep/gemfile.rb
+- lib/safedep/gemfile/dependency.rb
+- lib/safedep/gemfile_lock.rb
+- lib/safedep/gemspec.rb
+- lib/safedep/gemspec/dependency.rb
+- lib/safedep/runner.rb
+- lib/safedep/version.rb
+- safedep.gemspec
+- spec/safedep/gemfile/dependency_spec.rb
+- spec/safedep/gemfile_lock_spec.rb
+- spec/safedep/gemfile_spec.rb
+- spec/safedep/gemspec/dependency_spec.rb
+- spec/safedep/gemspec_spec.rb
+- spec/spec_helper.rb
+- spec/support/file_helper.rb
+- spec/support/shared_contexts.rb
+homepage: https://github.com/yujinakayama/safedep
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.5
+signing_key: 
+specification_version: 4
+summary: Make your Gemfile safe by adding dependency version specifiers automatically.
+test_files:
+- spec/safedep/gemfile/dependency_spec.rb
+- spec/safedep/gemfile_lock_spec.rb
+- spec/safedep/gemfile_spec.rb
+- spec/safedep/gemspec/dependency_spec.rb
+- spec/safedep/gemspec_spec.rb
+- spec/spec_helper.rb
+- spec/support/file_helper.rb
+- spec/support/shared_contexts.rb