binstat 1.0.0__tar.gz

binstat-1.0.0/.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+    groups:
+      actions:
+        patterns: ["*"]
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: monthly
+    # dependencies are minimum versions (>=) ; only open security updates, not routine upgrades
+    open-pull-requests-limit: 0

binstat-1.0.0/.github/workflows/python-package.yml

@@ -0,0 +1,131 @@
+# This workflow will install Python dependencies, run tests and lint with a variety of Python versions
+# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-python
+
+name: build
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest]
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+    env:
+      cov_python_version: "3.13"
+    steps:
+    - uses: actions/checkout@v7
+    - name: Set up Python ${{ matrix.python-version }}
+      uses: actions/setup-python@v7
+      with:
+        python-version: ${{ matrix.python-version }}
+    - name: Install package
+      run: |
+        python -m pip install --upgrade pip
+        python -m pip install flake8 pytest pytest-cov
+        pip install -r requirements.txt
+        pip install .[train]
+    - name: Lint with flake8
+      run: |
+        # stop the build if there are Python syntax errors or undefined names
+        flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
+        # exit-zero treats all errors as warnings. The GitHub editor is 127 chars wide
+        flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
+    - name: Test package with pytest
+      run: |
+        pytest --cov=binstat --cov-report=xml
+    - name: Upload coverage report
+      if: matrix.python-version == env.cov_python_version
+      uses: actions/upload-artifact@v7
+      with:
+        name: coverage-report
+        path: coverage.xml
+  coverage:
+    # only publish the badge for commits on main (not for pull requests)
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    needs: build
+    permissions:
+      contents: write
+    runs-on: ubuntu-latest
+    env:
+      cov_badge_path: docs/coverage.svg
+    steps:
+    - uses: actions/checkout@v7
+    - name: Set up Python
+      uses: actions/setup-python@v7
+      with:
+        python-version: "3.13"
+    - name: Download coverage report
+      uses: actions/download-artifact@v8
+      with:
+        name: coverage-report
+    - name: Make coverage badge
+      run: |
+        pip install genbadge[coverage]
+        genbadge coverage -i coverage.xml -o $cov_badge_path
+    - name: Push coverage badge
+      run: |
+        # keep the badge alone on an orphan branch so that main is never modified by the workflow
+        git config --local user.email "github-actions[bot]@users.noreply.github.com"
+        git config --local user.name "github-actions[bot]"
+        if git fetch --depth=1 origin coverage-badge 2>/dev/null && \
+           git show FETCH_HEAD:$cov_badge_path | cmp -s - $cov_badge_path; then
+          echo "Coverage badge unchanged"
+          exit 0
+        fi
+        git checkout --orphan coverage-badge
+        git rm -rqf --cached .
+        git add $cov_badge_path
+        git commit -m "Update coverage badge"
+        git push origin coverage-badge --force
+  deploy:
+    # only publish from pushes to main, never from pull requests
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    environment:
+      name: pypi
+      url: https://pypi.org/p/binstat
+    permissions:
+      # required for PyPI trusted publishing (OIDC)
+      id-token: write
+      contents: read
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+    - uses: actions/checkout@v7
+    - name: Check whether the version is already on PyPI
+      # comparing with PyPI (not with the previous commit) also releases a version whose push did not trigger a deploy
+      id: version
+      run: |
+        version=$(tr -d '[:space:]' < src/binstat/VERSION.txt)
+        status=$(curl -s -o /dev/null -w '%{http_code}' --retry 3 "https://pypi.org/pypi/binstat/$version/json")
+        case "$status" in
+          200) echo "Version $version is already on PyPI" ; echo "new=false" >> "$GITHUB_OUTPUT" ;;
+          404) echo "Version $version is not on PyPI yet" ; echo "new=true" >> "$GITHUB_OUTPUT" ;;
+          *)   echo "::error::Unexpected HTTP status $status from PyPI" ; exit 1 ;;
+        esac
+    - if: steps.version.outputs.new == 'true'
+      name: Cleanup README
+      run: |
+        sed -ri 's/^(##*)\s*:.*:\s*/\1 /g' README.md
+        awk '{if (match($0,"## Supporters")) exit; print}' README.md > README
+        mv -f README README.md
+    - if: steps.version.outputs.new == 'true'
+      name: Set up Python
+      uses: actions/setup-python@v7
+      with:
+        python-version: "3.13"
+    - if: steps.version.outputs.new == 'true'
+      name: Build binstat package
+      run: python3 -m pip install --upgrade build && python3 -m build
+    - if: steps.version.outputs.new == 'true'
+      name: Publish to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1

binstat-1.0.0/.github/workflows/security.yml

@@ -0,0 +1,31 @@
+# This workflow audits the package dependencies for known vulnerabilities
+# It is separate from python-package.yml so that a new advisory never blocks a release
+
+name: security
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+  schedule:
+    - cron: "0 6 * * 1"  # weekly, catches new advisories between pushes
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  pip-audit:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v7
+    - name: Set up Python
+      uses: actions/setup-python@v7
+      with:
+        python-version: "3.13"
+    - name: Install pip-audit
+      run: python -m pip install --upgrade pip pip-audit
+    - name: Audit dependencies
+      # resolves the dependencies of pyproject.toml in an isolated environment, so only these are audited
+      run: pip-audit .

binstat-1.0.0/.gitignore

@@ -0,0 +1,72 @@
+# Temp files
+*~
+*.backup
+.DS_Store
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+env/
+build/
+.build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib64/
+parts/
+sdist/
+reinstall.sh
+update.sh
+version.py
+
+var/
+*.egg-info/
+.installed.cfg
+*.egg
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+MANIFEST
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*,cover
+
+# Translations
+*.mo
+*.pot
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+target/
+
+# Project artifacts
+.deprecated
+.idea
+.vagrant
+.test
+tmp
+TODO

binstat-1.0.0/.readthedocs.yaml

@@ -0,0 +1,13 @@
+version: 2
+
+build:
+  os: ubuntu-24.04
+  tools:
+    python: "3.13"
+
+mkdocs:
+  configuration: docs/mkdocs.yml
+
+python:
+  install:
+    - requirements: docs/requirements.txt