linux-mirror-bench 0.1.1__tar.gz

linux_mirror_bench-0.1.1/.dockerignore

@@ -0,0 +1,28 @@
+.git
+.github
+.venv
+.venv-*/
+dist/
+build/
+*.egg-info/
+__pycache__/
+*.pyc
+*.pyo
+.ruff_cache/
+.mypy_cache/
+.pytest_cache/
+.coverage
+htmlcov/
+tests/
+docs/
+.pre-commit-config.yaml
+.yamllint.yaml
+.markdownlint.yaml
+.editorconfig
+.gitignore
+.dockerignore
+Makefile
+CHANGELOG.md
+CONTRIBUTING.md
+AGENTS.md
+SECURITY.md

linux_mirror_bench-0.1.1/.editorconfig

@@ -0,0 +1,18 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+indent_size = 4
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.{yml,yaml,json,md,toml}]
+indent_size = 2
+
+[Makefile]
+indent_style = tab
+
+[Dockerfile]
+indent_size = 2

linux_mirror_bench-0.1.1/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,70 @@
+---
+name: Bug report
+description: Something is broken or behaves unexpectedly.
+title: "bug: "
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to file a bug. Please fill out every section
+        so it can be triaged without a back-and-forth.
+
+  - type: input
+    id: version
+    attributes:
+      label: mirror-bench version
+      description: Output of `mirror-bench --version` or the git SHA.
+      placeholder: "0.1.0"
+    validations:
+      required: true
+
+  - type: input
+    id: install
+    attributes:
+      label: How did you install it?
+      placeholder: "pipx / uv tool / docker pull ghcr.io/... / source"
+    validations:
+      required: true
+
+  - type: input
+    id: host
+    attributes:
+      label: Host OS + Python
+      placeholder: "Ubuntu 24.04, Python 3.14.4 / macOS 15.0 / Fedora 41 container"
+    validations:
+      required: true
+
+  - type: textarea
+    id: command
+    attributes:
+      label: Command you ran
+      description: Include the full invocation.
+      render: shell
+      placeholder: "mirror-bench bench --distro ubuntu --country US --top 5"
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      description: Paste output, errors, or a screenshot.
+      render: text
+    validations:
+      required: true
+
+  - type: textarea
+    id: extras
+    attributes:
+      label: Anything else?
+      description: Relevant context — firewall, proxy, VPN, weird network, etc.
+    validations:
+      required: false

linux_mirror_bench-0.1.1/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,6 @@
+---
+blank_issues_enabled: false
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/MysticRyuujin/mirror-bench/security/advisories/new
+    about: Please report security issues privately — see SECURITY.md.

linux_mirror_bench-0.1.1/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,37 @@
+---
+name: Feature request
+description: Suggest a new capability or improvement.
+title: "feat: "
+labels: [enhancement]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: What problem would this solve?
+      description: Describe the real-world use case, not the implementation.
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: Sketch the UX or API. CLI flag shapes, output columns, etc.
+    validations:
+      required: false
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Workarounds you tried, related tools, etc.
+    validations:
+      required: false
+
+  - type: checkboxes
+    id: scope
+    attributes:
+      label: Scope sanity-check
+      options:
+        - label: This stays read-only (does not modify /etc/apt, /etc/yum.repos.d, pacman mirrorlist, etc.)
+          required: true

linux_mirror_bench-0.1.1/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,32 @@
+# Pull request
+
+Keep the PR title Conventional-Commit shaped: `feat(scope): summary`.
+
+## Summary
+
+What does this change and why? One or two paragraphs max.
+
+## Type of change
+
+- [ ] feat — new user-visible capability
+- [ ] fix — bug fix
+- [ ] refactor — no behavior change
+- [ ] docs
+- [ ] chore / ci
+- [ ] breaking change (describe migration below)
+
+## How did you verify this?
+
+- [ ] `make ci-local` passes
+- [ ] Unit tests added/updated
+- [ ] Integration tests (`make test-integration`) pass, if relevant
+- [ ] Tested the CLI manually against at least one real distro
+- [ ] Docker image builds and `docker run` behaves correctly (if Docker changed)
+
+## Breaking changes / migration
+
+Delete this section if not applicable.
+
+## Related issues
+
+`Closes #123`, `Refs #456`.

linux_mirror_bench-0.1.1/.github/dependabot.yml

@@ -0,0 +1,43 @@
+---
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: deps
+      include: scope
+    groups:
+      runtime:
+        dependency-type: production
+        update-types: [minor, patch]
+      dev:
+        dependency-type: development
+        update-types: [minor, patch, major]
+      major-runtime:
+        dependency-type: production
+        update-types: [major]
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: deps(actions)
+    groups:
+      actions:
+        patterns: ["*"]
+
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: deps(docker)

linux_mirror_bench-0.1.1/.github/workflows/ci.yml

@@ -0,0 +1,157 @@
+---
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  PYTHON_VERSION: "3.14"
+  UV_VERSION: "0.11.7"
+
+jobs:
+  pre-commit:
+    name: Pre-commit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+      - uses: astral-sh/setup-uv@v7
+        with:
+          version: ${{ env.UV_VERSION }}
+          enable-cache: true
+      - name: pre-commit/action
+        uses: pre-commit/action@v3.0.1
+
+  lint:
+    name: Lint + format
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v7
+        with:
+          version: ${{ env.UV_VERSION }}
+          enable-cache: true
+          cache-dependency-glob: pyproject.toml
+      - run: uv sync --frozen --all-extras || uv sync --all-extras
+      - name: Ruff check
+        run: uv run ruff check --output-format=github .
+      - name: Ruff format check
+        run: uv run ruff format --check .
+
+  typecheck:
+    name: Mypy (strict)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v7
+        with:
+          version: ${{ env.UV_VERSION }}
+          enable-cache: true
+          cache-dependency-glob: pyproject.toml
+      - run: uv sync --frozen --all-extras || uv sync --all-extras
+      - name: mypy
+        run: uv run mypy src tests
+
+  test:
+    name: Tests (Python ${{ matrix.python }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.14"]
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python }}
+      - uses: astral-sh/setup-uv@v7
+        with:
+          version: ${{ env.UV_VERSION }}
+          enable-cache: true
+          cache-dependency-glob: pyproject.toml
+      - run: uv sync --frozen --all-extras || uv sync --all-extras
+      - name: pytest
+        run: uv run pytest -v --tb=short
+      - name: Smoke-test the built CLI
+        run: |
+          uv build
+          uv run --no-project --with "./dist/$(ls dist/ | grep .whl | head -n1)" mirror-bench --help
+
+  security:
+    name: Security scan (bandit + pip-audit)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v7
+        with:
+          version: ${{ env.UV_VERSION }}
+          enable-cache: true
+          cache-dependency-glob: pyproject.toml
+      - run: uv sync --frozen --all-extras || uv sync --all-extras
+      - name: Bandit
+        run: uv run --with "bandit[toml]" bandit -c pyproject.toml -r src
+      - name: pip-audit (runtime deps)
+        run: |
+          uv export --no-emit-project --format requirements.txt > .audit-reqs.txt
+          uv run --with pip-audit pip-audit --progress-spinner off --strict --disable-pip -r .audit-reqs.txt
+
+  docker:
+    name: Docker build + Trivy scan
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+    steps:
+      - uses: actions/checkout@v6
+      - uses: docker/setup-buildx-action@v4
+      - name: Build image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          push: false
+          load: true
+          tags: mirror-bench:ci
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+      - name: Trivy scan (image)
+        uses: aquasecurity/trivy-action@v0.36.0
+        with:
+          image-ref: mirror-bench:ci
+          format: sarif
+          output: trivy-image.sarif
+          severity: HIGH,CRITICAL
+          ignore-unfixed: true
+          exit-code: "1"
+      - name: Upload Trivy SARIF
+        if: always()
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: trivy-image.sarif
+          category: trivy-image
+      - name: Smoke test container
+        run: docker run --rm mirror-bench:ci --help
+
+  all-green:
+    name: CI green
+    runs-on: ubuntu-latest
+    needs: [pre-commit, lint, typecheck, test, security, docker]
+    if: always()
+    steps:
+      - name: Aggregate result
+        run: |
+          if [[ "${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}" == "true" ]]; then
+            echo "One or more jobs failed."
+            exit 1
+          fi

linux_mirror_bench-0.1.1/.github/workflows/release-please.yml

@@ -0,0 +1,33 @@
+---
+# Release-Please — turns merged Conventional Commits on main into a
+# versioned release PR. Merging that PR creates a git tag, which the
+# `release.yml` workflow listens for to build + publish the wheel and image.
+
+name: Release Please
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    outputs:
+      release_created: ${{ steps.release.outputs.release_created }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
+      version: ${{ steps.release.outputs.version }}
+    steps:
+      # GITHUB_TOKEN can't trigger downstream workflows (GitHub security
+      # feature). Falls back to GITHUB_TOKEN locally; CI with RELEASE_TOKEN
+      # set (a fine-grained PAT with contents:write + pull-requests:write)
+      # lets the created tag trigger release.yml automatically.
+      - id: release
+        uses: googleapis/release-please-action@v5
+        with:
+          token: ${{ secrets.RELEASE_TOKEN || secrets.GITHUB_TOKEN }}
+          config-file: .release-please-config.json
+          manifest-file: .release-please-manifest.json

linux_mirror_bench-0.1.1/.github/workflows/release.yml

@@ -0,0 +1,155 @@
+---
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: Tag to release (e.g. v0.1.0)
+        required: true
+
+permissions:
+  contents: read
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+env:
+  PYTHON_VERSION: "3.14"
+  UV_VERSION: "0.11.7"
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-wheel:
+    name: Build sdist + wheel
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.version.outputs.value }}
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+      - uses: astral-sh/setup-uv@v7
+        with:
+          version: ${{ env.UV_VERSION }}
+      - id: version
+        run: |
+          ref="${{ github.event.inputs.tag || github.ref_name }}"
+          echo "value=${ref#v}" >> "$GITHUB_OUTPUT"
+      - run: uv build
+      - uses: actions/upload-artifact@v7
+        with:
+          name: dist
+          path: dist/
+          retention-days: 7
+
+  publish-pypi:
+    name: Publish to PyPI (OIDC)
+    needs: build-wheel
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/linux-mirror-bench/
+    permissions:
+      id-token: write # trusted publishing
+    steps:
+      - uses: actions/download-artifact@v8
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true
+
+  attest-wheel:
+    name: Attest wheel provenance
+    needs: [build-wheel, publish-pypi]
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
+      contents: read
+    steps:
+      - uses: actions/download-artifact@v8
+        with:
+          name: dist
+          path: dist/
+      - uses: actions/attest-build-provenance@v4
+        with:
+          subject-path: "dist/*"
+
+  docker:
+    name: Build + push container
+    needs: build-wheel
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+      attestations: write
+    steps:
+      - uses: actions/checkout@v6
+      - uses: docker/setup-qemu-action@v4
+      - uses: docker/setup-buildx-action@v4
+      - uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=raw,value=latest,enable={{is_default_branch}}
+          labels: |
+            org.opencontainers.image.title=mirror-bench
+            org.opencontainers.image.description=Cross-distro Linux package mirror benchmarking
+            org.opencontainers.image.licenses=AGPL-3.0-or-later
+      - id: build
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            VERSION=${{ needs.build-wheel.outputs.version }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          sbom: true
+          provenance: mode=max
+      - name: Attest container image
+        uses: actions/attest-build-provenance@v4
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-digest: ${{ steps.build.outputs.digest }}
+          push-to-registry: true
+
+  github-release:
+    name: GitHub release
+    needs: [build-wheel, publish-pypi, docker]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/download-artifact@v8
+        with:
+          name: dist
+          path: dist/
+      - uses: softprops/action-gh-release@v3
+        with:
+          tag_name: ${{ github.event.inputs.tag || github.ref_name }}
+          generate_release_notes: true
+          files: dist/*

linux_mirror_bench-0.1.1/.gitignore

@@ -0,0 +1,72 @@
+# -- Python --------------------------------------------------------------
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+*.egg
+*.egg-info/
+
+# -- Virtual environments -------------------------------------------------
+.venv/
+venv/
+env/
+ENV/
+__pypackages__/
+# uv.lock IS committed — it pins the exact dependency graph for reproducible
+# installs, Docker image builds, and CI. Do not gitignore it.
+
+# -- Build artifacts ------------------------------------------------------
+build/
+dist/
+wheels/
+*.manifest
+*.spec
+
+# -- Test + coverage ------------------------------------------------------
+.coverage
+.coverage.*
+coverage.xml
+htmlcov/
+.pytest_cache/
+.tox/
+.nox/
+.hypothesis/
+.audit-reqs.txt   # transient artifact from `make security` / CI pip-audit
+
+# -- Type checking --------------------------------------------------------
+.mypy_cache/
+.pyre/
+.pytype/
+.ruff_cache/
+
+# -- Jupyter --------------------------------------------------------------
+.ipynb_checkpoints/
+
+# -- IDE / editors --------------------------------------------------------
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# -- OS -------------------------------------------------------------------
+.DS_Store
+Thumbs.db
+desktop.ini
+
+# -- Logs -----------------------------------------------------------------
+*.log
+
+# -- Secrets: never commit. Add a concrete `.env.example` if needed. ------
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+*.crt
+*.p12
+*.pfx
+
+# -- Node (prettier pulls in node under pre-commit's cache, not here;
+#    this guards against accidental `npm init` in-tree) -------------------
+node_modules/

linux_mirror_bench-0.1.1/.markdownlint.yaml

@@ -0,0 +1,7 @@
+---
+# 80 chars is too narrow for prose READMEs with command examples; tables and
+# fenced code blocks are exempted because neither can meaningfully wrap.
+MD013:
+  line_length: 120
+  code_blocks: false
+  tables: false