cosmic-crunch 2.0.0__tar.gz

cosmic_crunch-2.0.0/.github/FUNDING.yml

@@ -0,0 +1,12 @@
+# These are supported funding model platforms
+
+github: [ErickShepherd] # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
+patreon: ErickShepherd # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: # Replace with a single Ko-fi username
+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+otechie: # Replace with a single Otechie username
+custom: ['paypal.me/ErickEShepherd', 'https://cash.app/$ErickShepherd', 'https://venmo.com/ErickShepherd', 'https://erickshepherd.com/pay/bitcoin/'] # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']

cosmic_crunch-2.0.0/.github/workflows/ci.yml

@@ -0,0 +1,55 @@
+name: CI
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  lint:
+    name: ruff
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install ruff
+        run: python -m pip install ruff
+      - name: Run ruff
+        run: ruff check .
+
+  test:
+    name: pytest (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install package with test extras
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e ".[test]"
+      - name: Run tests (offline)
+        run: python -m pytest -q
+
+  build:
+    name: build + twine check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install build tooling
+        run: python -m pip install build twine
+      - name: Build sdist + wheel
+        run: python -m build
+      - name: Check distributions
+        run: twine check dist/*

cosmic_crunch-2.0.0/.github/workflows/publish.yml

@@ -0,0 +1,79 @@
+name: Publish to PyPI
+
+# Publishes the package via PyPI Trusted Publishing (OIDC) — no API token is
+# stored anywhere (not in the repo, not in GitHub secrets). PyPI verifies the
+# workflow's short-lived OIDC identity instead.
+#
+# Two ways to run:
+#   * A published GitHub Release  -> builds and publishes to PyPI.
+#   * Manual "Run workflow"       -> choose testpypi (dry run) or pypi.
+#
+# The publish jobs run in protected GitHub Environments (`pypi` / `testpypi`).
+# Add yourself as a required reviewer on each (repo Settings -> Environments)
+# so every upload pauses for your one-click approval before it leaves.
+
+on:
+  release:
+    types: [released]  # full releases only — pre-releases never auto-publish
+  workflow_dispatch:
+    inputs:
+      target:
+        description: "Where to publish"
+        type: choice
+        options: [testpypi, pypi]
+        default: testpypi
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build sdist + wheel
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Build
+        run: |
+          python -m pip install --upgrade build twine
+          python -m build
+          python -m twine check dist/*
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish-testpypi:
+    name: Publish to TestPyPI
+    needs: build
+    if: github.event_name == 'workflow_dispatch' && inputs.target == 'testpypi'
+    runs-on: ubuntu-latest
+    environment: testpypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+          skip-existing: true  # re-dispatching a dry run for an existing version won't fail
+
+  publish-pypi:
+    name: Publish to PyPI
+    needs: build
+    if: github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && inputs.target == 'pypi')
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1

cosmic_crunch-2.0.0/.gitignore

@@ -0,0 +1,15 @@
+# Python bytecode / caches
+__pycache__/
+*.py[cod]
+.pytest_cache/
+
+# Packaging / build artifacts
+build/
+dist/
+*.egg-info/
+
+# Logs
+*.log
+
+# Downloaded data directories (default fetch SAVE_DIRECTORY)
+jpl_cosmic/

cosmic_crunch-2.0.0/CHANGELOG.md

@@ -0,0 +1,72 @@
+# Changelog
+
+All notable changes to this project are documented here. The format is based on
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
+adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [2.0.0] — 2026-07-08
+
+The 2020 JPL site restructure broke v1 (it silently downloaded nothing), and v1
+carried latent security and correctness defects. v2 is a modernization: same
+purpose, packaged, tested, and fixed.
+
+### Added
+- Packaged as the `cosmic_crunch` distribution with a single `cosmic-crunch`
+  console entry point (`get` and `convert` subcommands) via `pyproject.toml`
+  (hatchling); requires Python 3.10+.
+- `--base-url` flag and `COSMIC_CRUNCH_BASE_URL` environment variable to override
+  the crawl root.
+- `--instrument` flag (default `cosmic`) to select other instrument trees
+  (`champ`, `gracea`, `gracefo1`, …).
+- Atomic, resumable downloads: stream to `<name>.part` then rename; skip files
+  already present with a matching size.
+- Offline `pytest` suite and a GitHub Actions CI workflow (ruff + pytest on
+  Python 3.10–3.13 + `build`/`twine check`).
+- `CHANGELOG.md` and `CITATION.cff`.
+
+### Changed
+- **New crawl root** `https://genesis.jpl.nasa.gov/ftp/glevels/` (the v1
+  `/ftp/pub/genesis/glevels` root is dead).
+- **Fail loud:** a crawl that finds zero data files now raises and exits
+  non-zero instead of silently "succeeding" with nothing downloaded.
+- **Bounded retry:** the v1 infinite silent retry is replaced with a bounded
+  retry (default 3 attempts, exponential backoff, logged, re-raises on failure).
+- Relicensed from AGPL-3.0 to **MIT**.
+- Logging is configured only under the CLI, not at import time (importing the
+  package no longer creates a stray log file).
+- Deduplicated the copy-pasted `parallelize`/`flatten`/retry helpers into
+  `cosmic_crunch/_parallel.py`; single-sourced `__version__`.
+
+### Fixed
+- **Security:** removed `eval()` of downloaded header content (arbitrary code
+  execution); header values are parsed with `ast.literal_eval` + raw-string
+  fallback, preserving brace-set element order.
+- **Security:** path traversal in downloads — a hostile or tampered directory
+  listing could smuggle `../` through a filename and write outside the save
+  directory. Downloaded filenames are now reduced to a bare leaf and confined
+  to the save root (irreducible unsafe names are rejected before any fetch).
+- The v1 `FILES_TO_GET = -1` default silently dropped the last crawled file on
+  every non-test run (`[:-1]`); it now defaults to downloading everything.
+- `crawl_convert` processed only the first path argument (a `return` inside the
+  per-path loop, plus a `paths` shadowing typo) — it now converts all paths.
+- Column-name loop-leak: rows of DataTypes with differing field counts were
+  parsed with the wrong column names — each type now keeps its own columns.
+- Single-file conversion creates its output directory; directory creation uses
+  `os.makedirs(exist_ok=True)`.
+
+### Migration
+- The invocation changed: `python get_files.py …` / `python convert_files.py …`
+  become `cosmic-crunch get …` / `cosmic-crunch convert …`. This is the breaking
+  change behind the major version bump. There are no deprecation shims (the tool
+  was never published and has no known downstream users).
+
+## [1.3.x] — 2020–2021
+
+The original two-script tool (unpackaged, AGPL-3.0, never published to PyPI):
+
+- `get_files.py` (v1.3.1) — download JPL COSMIC ASCII data files. Created
+  2020-12-11, last updated 2021-08-02.
+- `convert_files.py` (v1.3.3) — convert COSMIC ASCII files to netCDF4. Created
+  2021-01-28, last updated 2021-08-02.
+
+[2.0.0]: https://github.com/ErickShepherd/cosmic-crunch/releases/tag/v2.0.0

cosmic_crunch-2.0.0/CITATION.cff

@@ -0,0 +1,22 @@
+cff-version: 1.2.0
+message: "If you use this software, please cite it as below."
+title: "cosmic-crunch"
+abstract: >-
+  Download JPL GENESIS COSMIC radio-occultation ASCII data files and convert
+  them to netCDF4.
+type: software
+authors:
+  - family-names: "Shepherd"
+    given-names: "Erick"
+    email: "Contact@ErickShepherd.com"
+version: "2.0.0"
+date-released: "2026-07-08"
+license: MIT
+repository-code: "https://github.com/ErickShepherd/cosmic-crunch"
+url: "https://github.com/ErickShepherd/cosmic-crunch"
+keywords:
+  - COSMIC
+  - GENESIS
+  - JPL
+  - "radio occultation"
+  - netCDF4

cosmic_crunch-2.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020-2026 Erick Shepherd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

cosmic_crunch-2.0.0/PKG-INFO

@@ -0,0 +1,162 @@
+Metadata-Version: 2.4
+Name: cosmic-crunch
+Version: 2.0.0
+Summary: Download JPL GENESIS COSMIC radio-occultation ASCII files and convert them to netCDF4.
+Project-URL: Homepage, https://github.com/ErickShepherd/cosmic-crunch
+Author-email: Erick Shepherd <Contact@ErickShepherd.com>
+License-Expression: MIT
+License-File: LICENSE
+Keywords: COSMIC,GENESIS,JPL,netCDF4,radio occultation
+Requires-Python: >=3.10
+Requires-Dist: netcdf4>=1.6
+Requires-Dist: pandas>=2.0
+Requires-Dist: requests>=2.28
+Requires-Dist: tqdm>=4.60
+Provides-Extra: test
+Requires-Dist: pytest; extra == 'test'
+Description-Content-Type: text/markdown
+
+# cosmic-crunch
+
+[![CI](https://github.com/ErickShepherd/cosmic-crunch/actions/workflows/ci.yml/badge.svg)](https://github.com/ErickShepherd/cosmic-crunch/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![Python](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-blue.svg)](pyproject.toml)
+
+Download JPL GENESIS **COSMIC** radio-occultation ASCII data files and convert
+them to **netCDF4**.
+
+`cosmic-crunch` crawls the [JPL GENESIS](https://genesis.jpl.nasa.gov) data
+archive, downloads the Level-2 ASCII occultation profiles, and (optionally)
+converts them into self-describing netCDF4 files.
+
+> **Site restructure note (2020 → 2026).** JPL restructured the GENESIS site: the
+> old crawl root (`/ftp/pub/genesis/glevels`) is dead, so v1 of this tool silently
+> "succeeded" while downloading nothing. v2 targets the current root
+> `https://genesis.jpl.nasa.gov/ftp/glevels/` and **fails loudly** — a crawl that
+> finds nothing exits non-zero instead of pretending to succeed.
+>
+> **Mission status.** COSMIC-1 (FORMOSAT-3, flight modules FM1–FM6, served here as
+> `cosmic1/`–`cosmic6/`) was decommissioned in 2020, so this is a **static
+> archive** — the data has stopped changing. (COSMIC-2 is a different mission on a
+> different archive and is out of scope.)
+
+## Installation
+
+```bash
+pip install -e .
+```
+
+This installs the `cosmic-crunch` command with two subcommands, `get` and
+`convert`. Python 3.10+ is required.
+
+## Usage
+
+`cosmic-crunch` has a single entry point with two subcommands:
+
+```bash
+cosmic-crunch get      # crawl the GENESIS site and download ASCII files
+cosmic-crunch convert  # convert downloaded ASCII files to netCDF4
+```
+
+### `cosmic-crunch get`
+
+```
+usage: cosmic-crunch get [-h] [--base-url BASE_URL] [--instrument INSTRUMENT]
+                         [--year_regex YEAR_REGEX] [--date_regex DATE_REGEX]
+                         [--processes PROCESSES] [--test] [--netcdf4]
+                         [--skip_empty]
+```
+
+| flag | description |
+|------|-------------|
+| `--base-url` | Override the crawl root. Precedence: flag > `COSMIC_CRUNCH_BASE_URL` env var > built-in default (`https://genesis.jpl.nasa.gov/ftp/glevels`). |
+| `--instrument` | Instrument tree to crawl (substring filter). Defaults to `cosmic` (matches `cosmic1`–`cosmic6`); the same archive also serves `champ`, `gracea`, `gracefo1`, … |
+| `--year_regex` | Download only years matching this regular expression. |
+| `--date_regex` | Download only dates matching this regular expression. |
+| `--processes` | Worker processes for the `multiprocessing` pool (default `1`). |
+| `--test` | Download a small subset (cosmic1, 2019-01-03, 10 files) as a smoke test. |
+| `--netcdf4` | Convert the downloaded ASCII files to netCDF4 afterward. |
+| `--skip_empty` | Skip converting files whose data arrays are all empty. |
+
+Downloads are **atomic and resumable**: each file is streamed to a `.part`
+temporary and renamed into place only once complete, and files already present
+with a matching size are skipped — so an interrupted bulk pull can simply be
+re-run.
+
+A successful run resembles:
+
+```
+$ cosmic-crunch get --year_regex=2006 --date_regex=2006-05-02 --netcdf4 --skip_empty --processes=4
+Crawling all ./cosmic<#>/postproc: 100%|████████████████████| 6/6 [00:03<00:00,  1.61it/s]
+Crawling all ./cosmic<#>/.../<year>: 100%|██████████████████| 6/6 [00:03<00:00,  1.59it/s]
+Crawling all ./cosmic<#>/.../<date>: 100%|██████████████████| 3/3 [00:03<00:00,  1.17s/it]
+Crawling all ./cosmic<#>/.../L2/<format>: 100%|█████████████| 4/4 [00:04<00:00,  1.09s/it]
+Downloading data files: 100%|███████████████████████████████| 20/20 [00:26<00:00,  1.33s/it]
+Converting ASCII to netCDF4: 100%|██████████████████████████| 20/20 [00:03<00:00,  6.32it/s]
+
+ASCII to netCDF4 conversion summary:
+ - Successful conversions: 17
+ - Skipped conversions:    3
+ - Conversion errors:      0
+ - Total number of files:  20
+```
+
+Downloaded files are written under `./jpl_cosmic/<year>/<date>/txt/`.
+
+### `cosmic-crunch convert`
+
+```
+usage: cosmic-crunch convert [-h] [--logfile LOGFILE] [--processes PROCESSES]
+                             [--skip_empty]
+                             path [path ...]
+```
+
+Convert one or more ASCII `.txt.gz` files — or directories of them (crawled
+recursively) — to netCDF4. netCDF4 files are written into a sibling `nc/`
+directory (mirroring the `txt/` layout), or beside the source file otherwise.
+
+```bash
+cosmic-crunch convert ./jpl_cosmic/2006/ --skip_empty --processes=4
+```
+
+## netCDF4 output structure
+
+Each ASCII file becomes one netCDF4 file. The ASCII header becomes **global
+attributes**; each DataType profile becomes a **group** whose variables are that
+profile's columns, indexed by an `Index` dimension:
+
+```
+netcdf 20060501_0632co1_g35_2p6.L2 {
+  // global attributes: ProductCreationTime, ShortName, DataSetID,
+  //                     PlatformShortName, Receiver, ... (the ASCII header)
+
+  group: COSMIC1-Profile {
+    dimensions:  Index = <n> ;
+    variables:   Height, Lat, Lon, Refractivity, Temperature, Pressure, WV Pressure ;
+  }
+  group: ECMWF-Profile {
+    dimensions:  Index = <n> ;
+    variables:   Height, Lat, Lon, Refractivity, Temperature, Pressure, WV Pressure ;
+  }
+}
+```
+
+Missing values in the ASCII data (`-9999`) are stored as `NaN`.
+
+## Security note
+
+v1 parsed header values with `eval()`, allowing arbitrary code execution from a
+malicious or corrupted data file. v2 uses `ast.literal_eval` with a raw-string
+fallback — header parsing can no longer execute code.
+
+## Development
+
+```bash
+pip install -e ".[test]"
+python -m pytest -q        # offline test suite (never touches the network)
+ruff check .
+```
+
+## License
+
+MIT — see [LICENSE](LICENSE).

cosmic_crunch-2.0.0/README.md

@@ -0,0 +1,144 @@
+# cosmic-crunch
+
+[![CI](https://github.com/ErickShepherd/cosmic-crunch/actions/workflows/ci.yml/badge.svg)](https://github.com/ErickShepherd/cosmic-crunch/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![Python](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13-blue.svg)](pyproject.toml)
+
+Download JPL GENESIS **COSMIC** radio-occultation ASCII data files and convert
+them to **netCDF4**.
+
+`cosmic-crunch` crawls the [JPL GENESIS](https://genesis.jpl.nasa.gov) data
+archive, downloads the Level-2 ASCII occultation profiles, and (optionally)
+converts them into self-describing netCDF4 files.
+
+> **Site restructure note (2020 → 2026).** JPL restructured the GENESIS site: the
+> old crawl root (`/ftp/pub/genesis/glevels`) is dead, so v1 of this tool silently
+> "succeeded" while downloading nothing. v2 targets the current root
+> `https://genesis.jpl.nasa.gov/ftp/glevels/` and **fails loudly** — a crawl that
+> finds nothing exits non-zero instead of pretending to succeed.
+>
+> **Mission status.** COSMIC-1 (FORMOSAT-3, flight modules FM1–FM6, served here as
+> `cosmic1/`–`cosmic6/`) was decommissioned in 2020, so this is a **static
+> archive** — the data has stopped changing. (COSMIC-2 is a different mission on a
+> different archive and is out of scope.)
+
+## Installation
+
+```bash
+pip install -e .
+```
+
+This installs the `cosmic-crunch` command with two subcommands, `get` and
+`convert`. Python 3.10+ is required.
+
+## Usage
+
+`cosmic-crunch` has a single entry point with two subcommands:
+
+```bash
+cosmic-crunch get      # crawl the GENESIS site and download ASCII files
+cosmic-crunch convert  # convert downloaded ASCII files to netCDF4
+```
+
+### `cosmic-crunch get`
+
+```
+usage: cosmic-crunch get [-h] [--base-url BASE_URL] [--instrument INSTRUMENT]
+                         [--year_regex YEAR_REGEX] [--date_regex DATE_REGEX]
+                         [--processes PROCESSES] [--test] [--netcdf4]
+                         [--skip_empty]
+```
+
+| flag | description |
+|------|-------------|
+| `--base-url` | Override the crawl root. Precedence: flag > `COSMIC_CRUNCH_BASE_URL` env var > built-in default (`https://genesis.jpl.nasa.gov/ftp/glevels`). |
+| `--instrument` | Instrument tree to crawl (substring filter). Defaults to `cosmic` (matches `cosmic1`–`cosmic6`); the same archive also serves `champ`, `gracea`, `gracefo1`, … |
+| `--year_regex` | Download only years matching this regular expression. |
+| `--date_regex` | Download only dates matching this regular expression. |
+| `--processes` | Worker processes for the `multiprocessing` pool (default `1`). |
+| `--test` | Download a small subset (cosmic1, 2019-01-03, 10 files) as a smoke test. |
+| `--netcdf4` | Convert the downloaded ASCII files to netCDF4 afterward. |
+| `--skip_empty` | Skip converting files whose data arrays are all empty. |
+
+Downloads are **atomic and resumable**: each file is streamed to a `.part`
+temporary and renamed into place only once complete, and files already present
+with a matching size are skipped — so an interrupted bulk pull can simply be
+re-run.
+
+A successful run resembles:
+
+```
+$ cosmic-crunch get --year_regex=2006 --date_regex=2006-05-02 --netcdf4 --skip_empty --processes=4
+Crawling all ./cosmic<#>/postproc: 100%|████████████████████| 6/6 [00:03<00:00,  1.61it/s]
+Crawling all ./cosmic<#>/.../<year>: 100%|██████████████████| 6/6 [00:03<00:00,  1.59it/s]
+Crawling all ./cosmic<#>/.../<date>: 100%|██████████████████| 3/3 [00:03<00:00,  1.17s/it]
+Crawling all ./cosmic<#>/.../L2/<format>: 100%|█████████████| 4/4 [00:04<00:00,  1.09s/it]
+Downloading data files: 100%|███████████████████████████████| 20/20 [00:26<00:00,  1.33s/it]
+Converting ASCII to netCDF4: 100%|██████████████████████████| 20/20 [00:03<00:00,  6.32it/s]
+
+ASCII to netCDF4 conversion summary:
+ - Successful conversions: 17
+ - Skipped conversions:    3
+ - Conversion errors:      0
+ - Total number of files:  20
+```
+
+Downloaded files are written under `./jpl_cosmic/<year>/<date>/txt/`.
+
+### `cosmic-crunch convert`
+
+```
+usage: cosmic-crunch convert [-h] [--logfile LOGFILE] [--processes PROCESSES]
+                             [--skip_empty]
+                             path [path ...]
+```
+
+Convert one or more ASCII `.txt.gz` files — or directories of them (crawled
+recursively) — to netCDF4. netCDF4 files are written into a sibling `nc/`
+directory (mirroring the `txt/` layout), or beside the source file otherwise.
+
+```bash
+cosmic-crunch convert ./jpl_cosmic/2006/ --skip_empty --processes=4
+```
+
+## netCDF4 output structure
+
+Each ASCII file becomes one netCDF4 file. The ASCII header becomes **global
+attributes**; each DataType profile becomes a **group** whose variables are that
+profile's columns, indexed by an `Index` dimension:
+
+```
+netcdf 20060501_0632co1_g35_2p6.L2 {
+  // global attributes: ProductCreationTime, ShortName, DataSetID,
+  //                     PlatformShortName, Receiver, ... (the ASCII header)
+
+  group: COSMIC1-Profile {
+    dimensions:  Index = <n> ;
+    variables:   Height, Lat, Lon, Refractivity, Temperature, Pressure, WV Pressure ;
+  }
+  group: ECMWF-Profile {
+    dimensions:  Index = <n> ;
+    variables:   Height, Lat, Lon, Refractivity, Temperature, Pressure, WV Pressure ;
+  }
+}
+```
+
+Missing values in the ASCII data (`-9999`) are stored as `NaN`.
+
+## Security note
+
+v1 parsed header values with `eval()`, allowing arbitrary code execution from a
+malicious or corrupted data file. v2 uses `ast.literal_eval` with a raw-string
+fallback — header parsing can no longer execute code.
+
+## Development
+
+```bash
+pip install -e ".[test]"
+python -m pytest -q        # offline test suite (never touches the network)
+ruff check .
+```
+
+## License
+
+MIT — see [LICENSE](LICENSE).

cosmic_crunch-2.0.0/cosmic_crunch/__init__.py

@@ -0,0 +1,19 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+'''
+
+cosmic_crunch: download JPL GENESIS COSMIC radio-occultation ASCII files and
+convert them to netCDF4.
+
+The single source of truth for the package version lives here (``__version__``)
+and is read at build time by hatchling (see ``pyproject.toml`` ->
+``[tool.hatch.version]``).
+
+Kept intentionally light: importing the package must not import the ``fetch`` or
+``convert`` submodules, so that ``import cosmic_crunch`` has no side effects.
+
+'''
+
+__author__ = "Erick Edward Shepherd"
+__version__ = "2.0.0"