aisbom-cli 0.9.1__tar.gz → 0.9.2__tar.gz

{aisbom_cli-0.9.1 → aisbom_cli-0.9.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aisbom-cli
-Version: 0.9.1
+Version: 0.9.2
 Summary: An AI Supply Chain security tool that that detects Pickle bombs and generates CycloneDX SBOMs for Machine Learning models.
 License-File: LICENSE
 Author: Ajoy L
@@ -52,7 +52,21 @@ pip install aisbom-cli
 ```
 *Note: The package name is `aisbom-cli`, but the command you run is `aisbom`.*
 
-### 1a. Standalone Binary (Air-Gapped)
+### 1a. Zero-Install (`pipx run`)
+Want to try AIsbom without committing to an install? Run it ephemerally with [pipx](https://pipx.pypa.io/):
+
+```bash
+# Single throwaway invocation — pipx fetches the latest, runs it, then cleans up.
+pipx run --spec aisbom-cli aisbom scan hf://google-bert/bert-base-uncased
+
+# Or install into pipx's isolated venv (still no system-Python pollution):
+pipx install aisbom-cli
+aisbom scan hf://google-bert/bert-base-uncased
+```
+
+`pipx run` is the fastest path from "I read about this on HN" to seeing a real scan. The `--spec aisbom-cli` is required because our PyPI package name (`aisbom-cli`) differs from the command name (`aisbom`).
+
+### 1b. Standalone Binary (Air-Gapped)
 For environments where installing Python is not possible, download the single-file executable from our [Releases page](https://github.com/Lab700xOrg/aisbom/releases/latest).
 
 > **📚 Guide:** [How to Audit Air-Gapped / Offline Systems](docs/air-gapped-guide.md)

{aisbom_cli-0.9.1 → aisbom_cli-0.9.2}/README.md

@@ -27,7 +27,21 @@ pip install aisbom-cli
 ```
 *Note: The package name is `aisbom-cli`, but the command you run is `aisbom`.*
 
-### 1a. Standalone Binary (Air-Gapped)
+### 1a. Zero-Install (`pipx run`)
+Want to try AIsbom without committing to an install? Run it ephemerally with [pipx](https://pipx.pypa.io/):
+
+```bash
+# Single throwaway invocation — pipx fetches the latest, runs it, then cleans up.
+pipx run --spec aisbom-cli aisbom scan hf://google-bert/bert-base-uncased
+
+# Or install into pipx's isolated venv (still no system-Python pollution):
+pipx install aisbom-cli
+aisbom scan hf://google-bert/bert-base-uncased
+```
+
+`pipx run` is the fastest path from "I read about this on HN" to seeing a real scan. The `--spec aisbom-cli` is required because our PyPI package name (`aisbom-cli`) differs from the command name (`aisbom`).
+
+### 1b. Standalone Binary (Air-Gapped)
 For environments where installing Python is not possible, download the single-file executable from our [Releases page](https://github.com/Lab700xOrg/aisbom/releases/latest).
 
 > **📚 Guide:** [How to Audit Air-Gapped / Offline Systems](docs/air-gapped-guide.md)

{aisbom_cli-0.9.1 → aisbom_cli-0.9.2}/aisbom/cli.py

@@ -27,6 +27,32 @@ import requests
 app = typer.Typer()
 console = Console()
 
+
+@app.callback(invoke_without_command=True)
+def main(ctx: typer.Context):
+    """AIsbom — AI Supply Chain Security Scanner."""
+    # Owns the no-args codepath. When the user runs `aisbom` with no
+    # subcommand, show a one-screen quickstart instead of Typer's auto-help
+    # block. `--help` still short-circuits to Typer's full reference, and
+    # subcommand invocations fall through (this callback is a no-op when
+    # `ctx.invoked_subcommand` is set).
+    if ctx.invoked_subcommand is None:
+        console.print(
+            Panel(
+                "[bold cyan]Deep introspection of ML model artifacts[/bold cyan]\n"
+                "[dim](.pt, .safetensors, .gguf) for malware, license risk, and silent drift.[/dim]\n\n"
+                "[bold]Try it now:[/bold]\n\n"
+                "    [white]$ aisbom scan hf://google-bert/bert-base-uncased[/white]\n\n"
+                "[dim]Run [white]aisbom --help[/white] for the full command reference.[/dim]",
+                title=" AIsbom ",
+                border_style="cyan",
+                padding=(1, 2),
+                expand=False,
+            )
+        )
+        raise typer.Exit(code=0)
+
+
 # Thread-safe storage for update checks
 update_result = {"version": None}
 

{aisbom_cli-0.9.1 → aisbom_cli-0.9.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "aisbom-cli"
-version = "0.9.1"
+version = "0.9.2"
 description = "An AI Supply Chain security tool that that detects Pickle bombs and generates CycloneDX SBOMs for Machine Learning models."
 authors = ["Ajoy L <lab700xdev@gmail.com>"]
 readme = "README.md"