pygorpmrustinfo 0.1.0__tar.gz

pygorpmrustinfo-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mike Moore
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

pygorpmrustinfo-0.1.0/MANIFEST.in

@@ -0,0 +1,7 @@
+include README.md
+include *.go go.mod go.sum
+include LICENSE
+include get_go_info
+include get_rpm_info
+include get_rust_audit
+recursive-include src *.py *.go

pygorpmrustinfo-0.1.0/PKG-INFO

@@ -0,0 +1,169 @@
+Metadata-Version: 2.4
+Name: pygorpmrustinfo
+Version: 0.1.0
+Summary: Unified Go-backed helpers for rpmdb, rust audit, and Go build metadata
+Home-page: https://github.com/MikeMoore63/pygorpmrustinfo
+Author: Mike Moore
+Author-email: z_z_zebra@yahoo.com
+License: MIT
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+# pygorpmrustinfo
+
+pygorpmrustinfo is a unified Python package that exposes the former rpmdb, rust audit, and Go build-info helpers through a single Go-backed extension.
+
+## Why this package exists
+
+The older split packages each relied on their own Go runtime and native extension. That approach is fragile in Python environments because Go's `c-shared` mode can be unstable when multiple Go runtimes are loaded into the same process. This is the problem described in [Go issue #65050](https://go.dev/issue/65050): loading multiple `c-shared` Go libraries in one process can lead to panics, crashes, or other runtime failures.
+
+This consolidation is meant to reduce that risk by keeping a single Go runtime in play, while also reducing memory usage compared with loading several separate native extensions.
+
+## Deprecation notice for the old scripts
+
+The legacy entry points and package names are being deprecated. The replacement package is pygorpmrustinfo, and the compatibility scripts remain available only for transition:
+
+- `get_go_info`
+- `get_rpm_info`
+- `get_rust_audit`
+- the older standalone package names for the previous split implementations
+
+These legacy scripts remain available for compatibility, but new work should target `pygorpmrustinfo` instead.
+
+## Installation
+
+```bash
+pip install pygorpmrustinfo
+```
+
+## Usage
+
+The package provides the same high-level functionality as the older helpers, but through one unified interface. If you are coming from the old packages, the main change is that you install and import one package instead of three separate ones.
+
+### CLI
+
+```bash
+get_go_info /path/to/go.mod
+get_rpm_info /path/to/Packages
+get_rust_audit /path/to/rust-binary
+```
+
+These scripts are preserved for compatibility, but the recommended path is to depend on `pygorpmrustinfo` directly.
+
+### Python API
+
+```python
+import json
+import pygorpmrustinfo
+
+# Go build metadata
+res = pygorpmrustinfo.get_go_build_info("/path/to/go.mod")
+print(json.dumps(res, indent=4))
+
+# RPM database metadata
+res = pygorpmrustinfo.get_rpm_db_info("/path/to/Packages")
+print(json.dumps(res, indent=4))
+
+# Rust audit metadata
+res = pygorpmrustinfo.get_rust_audit("/path/to/rust-binary")
+print(json.dumps(res, indent=4))
+```
+
+### Example: Go build info
+
+```python
+import pygorpmrustinfo
+
+info = pygorpmrustinfo.get_go_build_info("/path/to/go.mod")
+print(info["GoVersion"])
+print(info["Path"])
+```
+
+Example result:
+
+```python
+{
+    "GoVersion": "go1.18.4",
+    "Path": "github.com/example/project",
+    "Main": {
+        "Path": "github.com/example/project",
+        "Version": "(devel)",
+        "Sum": "",
+        "Replace": null
+    },
+    "Deps": []
+}
+```
+
+### Example: RPM database info
+
+```python
+import pygorpmrustinfo
+
+packages = pygorpmrustinfo.get_rpm_db_info("/path/to/Packages")
+for package in packages:
+    print(package.get("Name"), package.get("Version"))
+```
+
+Example result:
+
+```python
+[
+    {
+        "Name": "bash",
+        "Version": "5.1",
+        "Release": "1.el9"
+    }
+]
+```
+
+### Example: Rust audit info
+
+```python
+import pygorpmrustinfo
+
+packages = pygorpmrustinfo.get_rust_audit("/path/to/rust-binary")
+for package in packages.get("packages", []):
+    print(package.get("name"), package.get("version"))
+```
+
+Example result:
+
+```python
+{
+    "packages": [
+        {
+            "name": "serde",
+            "version": "1.0.197",
+            "kind": "build"
+        }
+    ]
+}
+```
+
+The functions always return a dictionary. On error you may see a structure like:
+
+```python
+{
+    "error": "path error:/path/to/missing/file"
+}
+```
+
+## Migration from the old packages
+
+If you previously used one of the older packages, the migration is straightforward:
+
+- replace `pyrpmdb` with `pygorpmrustinfo` and call `get_rpm_db_info(...)`
+- replace `pyrustaudit` with `pygorpmrustinfo` and call `get_rust_audit(...)`
+- replace `pygobuildinfo` with `pygorpmrustinfo` and call `get_go_build_info(...)`, `get_go_mod(...)`, or `get_go_sum(...)`
+
+For dependency declarations, update requirements, `pyproject.toml`, `setup.cfg`, or `setup.py` to depend on `pygorpmrustinfo` instead of the old package names.
+
+## Notes
+
+- The consolidation is primarily a stability and resource-usage improvement.
+- It is also a practical mitigation for the risks documented in [Go issue #65050](https://go.dev/issue/65050).
+- If you are maintaining older automation, consider switching to the unified package now so you are not tied to the deprecated script-based workflow.

pygorpmrustinfo-0.1.0/README.md

@@ -0,0 +1,155 @@
+# pygorpmrustinfo
+
+pygorpmrustinfo is a unified Python package that exposes the former rpmdb, rust audit, and Go build-info helpers through a single Go-backed extension.
+
+## Why this package exists
+
+The older split packages each relied on their own Go runtime and native extension. That approach is fragile in Python environments because Go's `c-shared` mode can be unstable when multiple Go runtimes are loaded into the same process. This is the problem described in [Go issue #65050](https://go.dev/issue/65050): loading multiple `c-shared` Go libraries in one process can lead to panics, crashes, or other runtime failures.
+
+This consolidation is meant to reduce that risk by keeping a single Go runtime in play, while also reducing memory usage compared with loading several separate native extensions.
+
+## Deprecation notice for the old scripts
+
+The legacy entry points and package names are being deprecated. The replacement package is pygorpmrustinfo, and the compatibility scripts remain available only for transition:
+
+- `get_go_info`
+- `get_rpm_info`
+- `get_rust_audit`
+- the older standalone package names for the previous split implementations
+
+These legacy scripts remain available for compatibility, but new work should target `pygorpmrustinfo` instead.
+
+## Installation
+
+```bash
+pip install pygorpmrustinfo
+```
+
+## Usage
+
+The package provides the same high-level functionality as the older helpers, but through one unified interface. If you are coming from the old packages, the main change is that you install and import one package instead of three separate ones.
+
+### CLI
+
+```bash
+get_go_info /path/to/go.mod
+get_rpm_info /path/to/Packages
+get_rust_audit /path/to/rust-binary
+```
+
+These scripts are preserved for compatibility, but the recommended path is to depend on `pygorpmrustinfo` directly.
+
+### Python API
+
+```python
+import json
+import pygorpmrustinfo
+
+# Go build metadata
+res = pygorpmrustinfo.get_go_build_info("/path/to/go.mod")
+print(json.dumps(res, indent=4))
+
+# RPM database metadata
+res = pygorpmrustinfo.get_rpm_db_info("/path/to/Packages")
+print(json.dumps(res, indent=4))
+
+# Rust audit metadata
+res = pygorpmrustinfo.get_rust_audit("/path/to/rust-binary")
+print(json.dumps(res, indent=4))
+```
+
+### Example: Go build info
+
+```python
+import pygorpmrustinfo
+
+info = pygorpmrustinfo.get_go_build_info("/path/to/go.mod")
+print(info["GoVersion"])
+print(info["Path"])
+```
+
+Example result:
+
+```python
+{
+    "GoVersion": "go1.18.4",
+    "Path": "github.com/example/project",
+    "Main": {
+        "Path": "github.com/example/project",
+        "Version": "(devel)",
+        "Sum": "",
+        "Replace": null
+    },
+    "Deps": []
+}
+```
+
+### Example: RPM database info
+
+```python
+import pygorpmrustinfo
+
+packages = pygorpmrustinfo.get_rpm_db_info("/path/to/Packages")
+for package in packages:
+    print(package.get("Name"), package.get("Version"))
+```
+
+Example result:
+
+```python
+[
+    {
+        "Name": "bash",
+        "Version": "5.1",
+        "Release": "1.el9"
+    }
+]
+```
+
+### Example: Rust audit info
+
+```python
+import pygorpmrustinfo
+
+packages = pygorpmrustinfo.get_rust_audit("/path/to/rust-binary")
+for package in packages.get("packages", []):
+    print(package.get("name"), package.get("version"))
+```
+
+Example result:
+
+```python
+{
+    "packages": [
+        {
+            "name": "serde",
+            "version": "1.0.197",
+            "kind": "build"
+        }
+    ]
+}
+```
+
+The functions always return a dictionary. On error you may see a structure like:
+
+```python
+{
+    "error": "path error:/path/to/missing/file"
+}
+```
+
+## Migration from the old packages
+
+If you previously used one of the older packages, the migration is straightforward:
+
+- replace `pyrpmdb` with `pygorpmrustinfo` and call `get_rpm_db_info(...)`
+- replace `pyrustaudit` with `pygorpmrustinfo` and call `get_rust_audit(...)`
+- replace `pygobuildinfo` with `pygorpmrustinfo` and call `get_go_build_info(...)`, `get_go_mod(...)`, or `get_go_sum(...)`
+
+For dependency declarations, update requirements, `pyproject.toml`, `setup.cfg`, or `setup.py` to depend on `pygorpmrustinfo` instead of the old package names.
+
+## Notes
+
+- The consolidation is primarily a stability and resource-usage improvement.
+- It is also a practical mitigation for the risks documented in [Go issue #65050](https://go.dev/issue/65050).
+- If you are maintaining older automation, consider switching to the unified package now so you are not tied to the deprecated script-based workflow.

pygorpmrustinfo-0.1.0/get_go_info

@@ -0,0 +1,7 @@
+#!/usr/bin/env python3
+import sys
+
+from pygorpmrustinfo.cli import main
+
+if __name__ == "__main__":
+    main([sys.argv[0]] + sys.argv[1:])

pygorpmrustinfo-0.1.0/get_rpm_info

@@ -0,0 +1,7 @@
+#!/usr/bin/env python3
+import sys
+
+from pygorpmrustinfo.cli import main
+
+if __name__ == "__main__":
+    main([sys.argv[0]] + sys.argv[1:])

pygorpmrustinfo-0.1.0/get_rust_audit

@@ -0,0 +1,7 @@
+#!/usr/bin/env python3
+import sys
+
+from pygorpmrustinfo.cli import main
+
+if __name__ == "__main__":
+    main([sys.argv[0]] + sys.argv[1:])

pygorpmrustinfo-0.1.0/go.mod

@@ -0,0 +1,24 @@
+module github.com/MikeMoore63/pygorpmrustinfo
+
+go 1.26
+
+require (
+	github.com/glebarez/go-sqlite v1.22.0
+	github.com/jinzhu/copier v0.4.0
+	github.com/knqyf263/go-rpmdb v0.1.1
+	github.com/rust-secure-code/go-rustaudit v0.0.0-20250226111315-e20ec32e963c
+	golang.org/x/mod v0.37.0
+)
+
+require (
+	github.com/dustin/go-humanize v1.0.1 // indirect
+	github.com/google/uuid v1.5.0 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
+	golang.org/x/sys v0.15.0 // indirect
+	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
+	modernc.org/libc v1.37.6 // indirect
+	modernc.org/mathutil v1.6.0 // indirect
+	modernc.org/memory v1.7.2 // indirect
+	modernc.org/sqlite v1.28.0 // indirect
+)

pygorpmrustinfo-0.1.0/go.sum

@@ -0,0 +1,41 @@
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
+github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
+github.com/glebarez/go-sqlite v1.22.0 h1:uAcMJhaA6r3LHMTFgP0SifzgXg46yJkgxqyuyec+ruQ=
+github.com/glebarez/go-sqlite v1.22.0/go.mod h1:PlBIdHe0+aUEFn+r2/uthrWq4FxbzugL0L8Li6yQJbc=
+github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26 h1:Xim43kblpZXfIBQsbuBVKCudVG457BR2GZFIz3uw3hQ=
+github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26/go.mod h1:dDKJzRmX4S37WGHujM7tX//fmj1uioxKzKxz3lo4HJo=
+github.com/google/uuid v1.5.0 h1:1p67kYwdtXjb0gL0BPiP1Av9wiZPo5A8z2cWkTZ+eyU=
+github.com/google/uuid v1.5.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/jinzhu/copier v0.4.0 h1:w3ciUoD19shMCRargcpm0cm91ytaBhDvuRpz1ODO/U8=
+github.com/jinzhu/copier v0.4.0/go.mod h1:DfbEm0FYsaqBcKcFuvmOZb218JkPGtvSHsKg8S8hyyg=
+github.com/knqyf263/go-rpmdb v0.1.1 h1:oh68mTCvp1XzxdU7EfafcWzzfstUZAEa3MW0IJye584=
+github.com/knqyf263/go-rpmdb v0.1.1/go.mod h1:9LQcoMCMQ9vrF7HcDtXfvqGO4+ddxFQ8+YF/0CVGDww=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
+github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
+github.com/rust-secure-code/go-rustaudit v0.0.0-20250226111315-e20ec32e963c h1:8gOLsYwaY2JwlTMT4brS5/9XJdrdIbmk2obvQ748CC0=
+github.com/rust-secure-code/go-rustaudit v0.0.0-20250226111315-e20ec32e963c/go.mod h1:kwM/7r/rVluTE8qJbHAffduuqmSv4knVQT2IajGvSiA=
+github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+golang.org/x/mod v0.37.0 h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ=
+golang.org/x/mod v0.37.0/go.mod h1:m8S8VeM9r4dzDwjrKO0a1sZP3YjeMamRRlD+fmR2Q/0=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc=
+golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU=
+golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+modernc.org/libc v1.37.6 h1:orZH3c5wmhIQFTXF+Nt+eeauyd+ZIt2BX6ARe+kD+aw=
+modernc.org/libc v1.37.6/go.mod h1:YAXkAZ8ktnkCKaN9sw/UDeUVkGYJ/YquGO4FTi5nmHE=
+modernc.org/mathutil v1.6.0 h1:fRe9+AmYlaej+64JsEEhoWuAYBkOtQiMEU7n/XgfYi4=
+modernc.org/mathutil v1.6.0/go.mod h1:Ui5Q9q1TR2gFm0AQRqQUaBWFLAhQpCwNcuhBOSedWPo=
+modernc.org/memory v1.7.2 h1:Klh90S215mmH8c9gO98QxQFsY+W451E8AnzjoE2ee1E=
+modernc.org/memory v1.7.2/go.mod h1:NO4NVCQy0N7ln+T9ngWqOQfi7ley4vpwvARR+Hjw95E=
+modernc.org/sqlite v1.28.0 h1:Zx+LyDDmXczNnEQdvPuEfcFVA2ZPyaD7UCZDjef3BHQ=
+modernc.org/sqlite v1.28.0/go.mod h1:Qxpazz0zH8Z1xCFyi5GSL3FzbtZ3fvbjmywNogldEW0=

pygorpmrustinfo-0.1.0/pyproject.toml

@@ -0,0 +1,70 @@
+[build-system]
+requires = ["setuptools>=61", "wheel", "setuptools-golang"]
+build-backend = "setuptools.build_meta"
+
+[tool.cibuildwheel]
+enable = ["all"]
+
+[tool.cibuildwheel.windows]
+archs=["AMD64"]
+before-all = "powershell -ExecutionPolicy Bypass -File {project}\\installGo.ps1"
+skip = "pp*-win*"
+environment= """
+PATH="C:\\Go\\bin;C:\\Program Files\\Go\\bin;$PATH"
+GOPATH="C:\\Go"
+"""
+
+[tool.cibuildwheel.linux]
+archs=["auto64","aarch64"]
+before-all = '''
+switch_eol_centos_repos()
+{
+	if [ "${AUDITWHEEL_POLICY}" == "manylinux2014" ] && [ "${AUDITWHEEL_ARCH}" != "s390x" ]; then
+		# Centos 7 is EOL and is no longer available from the usual mirrors, so switch
+		# to https://vault.centos.org
+		sed -i 's/enabled=1/enabled=0/g' /etc/yum/pluginconf.d/fastestmirror.conf
+		sed -i 's/^mirrorlist/#mirrorlist/g' /etc/yum.repos.d/*.repo
+		sed -i 's;^.*baseurl=http://mirror;baseurl=https://vault;g' /etc/yum.repos.d/*.repo
+		if [ "${AUDITWHEEL_ARCH}" == "aarch64" ] || [ "${AUDITWHEEL_ARCH}" == "ppc64le" ]; then
+			sed -i 's;/centos/7/;/altarch/7/;g' /etc/yum.repos.d/*.repo
+		fi
+	fi
+}
+switch_eol_centos_repos
+if [ "${AUDITWHEEL_ARCH}" == "x86_64" ]
+then
+	mkdir -p /usr/local
+    curl https://dl.google.com/go/go1.26.1.linux-amd64.tar.gz | tar -C /usr/local -xzf -
+fi	
+if [ "${AUDITWHEEL_ARCH}" == "aarch64" ]
+then
+	mkdir -p /usr/local
+    curl https://dl.google.com/go/go1.26.1.linux-arm64.tar.gz | tar -C /usr/local -xzf -
+fi
+'''
+environment = """
+PATH=$PATH:/usr/local/go/bin
+"""
+
+[tool.cibuildwheel.macos]
+before-all = '''
+brew install go@1.26
+'''
+environment = "PATH=/usr/local/opt/go@1.26/bin:/opt/homebrew/opt/go@1.26/bin:$PATH"
+
+[[tool.cibuildwheel.overrides]]
+select = "*-musllinux*"
+before-all = '''
+if [ "${AUDITWHEEL_ARCH}" == "x86_64" ]
+then
+	wget https://golang.org/dl/go1.26.1.linux-amd64.tar.gz;tar -C /usr/local -xzf go1.26.1.linux-amd64.tar.gz
+fi
+if [ "${AUDITWHEEL_ARCH}" == "aarch64" ]
+then
+	wget https://golang.org/dl/go1.26.1.linux-arm64.tar.gz;tar -C /usr/local -xzf go1.26.1.linux-arm64.tar.gz
+fi
+'''
+
+environment = """
+PATH=$PATH:/usr/local/go/bin
+"""

pygorpmrustinfo-0.1.0/setup.cfg

@@ -0,0 +1,37 @@
+[metadata]
+name = pygorpmrustinfo
+version = 0.1.0
+author = Mike Moore
+author_email = z_z_zebra@yahoo.com
+license = MIT
+description = Unified Go-backed helpers for rpmdb, rust audit, and Go build metadata
+url = https://github.com/MikeMoore63/pygorpmrustinfo
+long_description = file: README.md
+long_description_content_type = text/markdown
+classifiers = 
+	Programming Language :: Python :: 3
+	Operating System :: OS Independent
+
+[options]
+zip_safe = False
+setup_requires = setuptools-golang
+scripts = 
+	get_go_info
+	get_rpm_info
+	get_rust_audit
+package_dir = 
+	=src
+packages = find:
+
+[options.packages.find]
+where = src
+
+[options.entry_points]
+pyinstaller40 = 
+	hook-dirs = pygorpmrustinfo._pyinstaller:get_hook_dirs
+	tests     = pygorpmrustinfo._pyinstaller:get_PyInstaller_tests
+
+[egg_info]
+tag_build = 
+tag_date = 0
+

pygorpmrustinfo-0.1.0/setup.py

@@ -0,0 +1,12 @@
+from setuptools import Extension, setup
+
+if __name__ == "__main__":
+    setup(
+        build_golang={"root": "github.com/MikeMoore63/pygorpmrustinfo"},
+        ext_modules=[
+            Extension(
+                "pygorpmrustinfo._pygorpmrustinfo",
+                ["src/pygorpmrustinfo/pygorpmrustinfo.go"],
+            )
+        ],
+    )

pygorpmrustinfo-0.1.0/src/pygobuildinfo/__init__.py

@@ -0,0 +1,15 @@
+from pygorpmrustinfo import (
+    get_go_build_info,
+    get_go_mod,
+    get_go_sum,
+    get_rpm_db_info,
+    get_rust_audit,
+)
+
+__all__ = [
+    "get_rpm_db_info",
+    "get_rust_audit",
+    "get_go_build_info",
+    "get_go_mod",
+    "get_go_sum",
+]

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo/__init__.py

@@ -0,0 +1,96 @@
+from __future__ import annotations
+
+from ._pyinstaller import get_hook_dirs, get_PyInstaller_tests
+
+__all__ = [
+    "get_hook_dirs",
+    "get_PyInstaller_tests",
+    "get_rpm_db_info",
+    "get_rust_audit",
+    "get_go_build_info",
+    "get_go_mod",
+    "get_go_sum",
+]
+
+import ctypes
+import json
+import os
+from pathlib import Path
+from sysconfig import get_config_var
+
+
+here = Path(__file__).absolute().parent
+ext_suffix = get_config_var("EXT_SUFFIX")
+so_file = os.path.join(here, ("_pygorpmrustinfo" + ext_suffix))
+
+so = ctypes.cdll.LoadLibrary(so_file)
+
+rpmdb_info_so = so.getrpmdbInfo
+rpmdb_info_so.argtypes = [ctypes.c_char_p]
+rpmdb_info_so.restype = ctypes.c_void_p
+
+rust_audit_so = so.getrustAudit
+rust_audit_so.argtypes = [ctypes.c_char_p]
+rust_audit_so.restype = ctypes.c_void_p
+
+go_build_info_so = so.getgobuildinfo
+go_build_info_so.argtypes = [ctypes.c_char_p]
+go_build_info_so.restype = ctypes.c_void_p
+
+go_mod_so = so.getgomod
+go_mod_so.argtypes = [ctypes.c_char_p]
+go_mod_so.restype = ctypes.c_void_p
+
+free = so.free
+free.argtypes = [ctypes.c_void_p]
+
+
+def _call_go_function(func, file_name):
+    res = func(file_name.encode("utf-8"))
+    if res is None:
+        return {"error": "empty response"}
+    try:
+        return json.loads(ctypes.string_at(res).decode("utf-8"))
+    except (UnicodeDecodeError, json.JSONDecodeError):
+        return {"error": "Error converting result to json"}
+    finally:
+        free(res)
+
+
+def get_rpm_db_info(file_name):
+    return _call_go_function(rpmdb_info_so, file_name)
+
+
+def get_rust_audit(file_name):
+    return _call_go_function(rust_audit_so, file_name)
+
+
+def get_go_build_info(file_name):
+    return _call_go_function(go_build_info_so, file_name)
+
+
+def get_go_mod(file_name):
+    return _call_go_function(go_mod_so, file_name)
+
+
+def get_go_sum(file_name):
+    result = {"error": "not a valid go sum file"}
+    if not os.path.isfile(file_name):
+        return result
+    with open(file_name, mode="rt", encoding="utf-8") as handle:
+        data = {}
+        for line in handle.readlines():
+            sumfields = line.strip().split()
+            if len(sumfields) < 3:
+                continue
+            if sumfields[1].endswith("/go.mod"):
+                sumfields[1] = sumfields[1][:-7]
+            data[sumfields[0]] = {"Version": sumfields[1], "Sum": sumfields[2]}
+        if data:
+            return {
+                "Deps": [
+                    {"Path": k, "Version": data[k]["Version"], "Sum": data[k]["Sum"]}
+                    for k in data
+                ]
+            }
+    return result

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo/_pyinstaller/__init__.py

@@ -0,0 +1,6 @@
+def get_hook_dirs():
+    return []
+
+
+def get_PyInstaller_tests():
+    return []

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo/cli.py

@@ -0,0 +1,64 @@
+import glob
+import json
+import os
+import sys
+
+from . import get_go_build_info, get_go_mod, get_go_sum, get_rpm_db_info, get_rust_audit
+
+
+def _default_mode_for_script(script_name):
+    name = os.path.basename(script_name or "")
+    if name == "get_rpm_info":
+        return "rpm"
+    if name == "get_rust_audit":
+        return "rust"
+    return "go-build"
+
+
+def _dispatch(path, mode):
+    if mode == "rpm":
+        return get_rpm_db_info(path)
+    if mode == "rust":
+        return get_rust_audit(path)
+    if mode == "go-mod":
+        return get_go_mod(path)
+    if mode == "go-sum":
+        return get_go_sum(path)
+    return get_go_build_info(path)
+
+
+def main(argv=None):
+    if argv is None:
+        argv = sys.argv
+    else:
+        argv = list(argv)
+
+    script_name = argv[0] if argv else sys.argv[0]
+    default_mode = _default_mode_for_script(script_name)
+    mode = default_mode
+    patterns = []
+    args = argv[1:] if len(argv) > 1 else []
+    index = 0
+    while index < len(args):
+        arg = args[index]
+        if arg.startswith("--mode="):
+            mode = arg.split("=", 1)[1]
+        elif arg == "--mode":
+            if index + 1 < len(args):
+                mode = args[index + 1]
+                index += 1
+        else:
+            patterns.append(arg)
+        index += 1
+
+    if not patterns:
+        patterns = ["*"]
+
+    for pattern in patterns:
+        for file in glob.glob(pattern):
+            result = _dispatch(file, mode)
+            print(json.dumps(result, indent=4))
+
+
+if __name__ == "__main__":
+    main()

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo/pygorpmrustinfo.go

@@ -0,0 +1,161 @@
+package main
+
+import "C"
+
+import (
+	"debug/buildinfo"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+
+	"golang.org/x/mod/modfile"
+
+	"github.com/glebarez/go-sqlite"
+	"github.com/jinzhu/copier"
+	rpmdb "github.com/knqyf263/go-rpmdb/pkg"
+	rustaudit "github.com/rust-secure-code/go-rustaudit"
+)
+
+type packageInfo struct {
+	Epoch           *int
+	Name            string
+	Version         string
+	Release         string
+	Arch            string
+	SourceRpm       string
+	Size            int
+	License         string
+	Vendor          string
+	Modularitylabel string
+	Summary         string
+	PGP             string
+	SigMD5          string
+	RSAHeader       string
+	InstallTime     int
+	BaseNames       []string
+	DirIndexes      []int32
+	DirNames        []string
+	FileSizes       []int32
+	FileDigests     []string
+	FileModes       []uint16
+	FileFlags       []int32
+	UserNames       []string
+	GroupNames      []string
+	Provides        []string
+	Requires        []string
+}
+
+//export getrpmdbInfo
+func getrpmdbInfo(fileNameIn *C.char) *C.char {
+	return C.CString(getrpmdbInfoInternal(C.GoString(fileNameIn)))
+}
+
+//export getrustAudit
+func getrustAudit(fileNameIn *C.char) *C.char {
+	return C.CString(getrustAuditInternal(C.GoString(fileNameIn)))
+}
+
+//export getgobuildinfo
+func getgobuildinfo(fileNameIn *C.char) *C.char {
+	return C.CString(getGoBuildInfoInternal(C.GoString(fileNameIn)))
+}
+
+//export getgomod
+func getgomod(fileNameIn *C.char) *C.char {
+	return C.CString(getGoMod(C.GoString(fileNameIn)))
+}
+
+func main() {}
+
+func getrpmdbInfoInternal(fileName string) string {
+	returnValue := `{ "error" : "Unknown" }`
+	db, err := rpmdb.Open(fileName)
+	if err != nil {
+		if pathErr := (*os.PathError)(nil); errors.As(err, &pathErr) && filepath.Clean(pathErr.Path) == filepath.Clean(fileName) {
+			returnValue = fmt.Sprintf(`{ "error": "path error:%v" }`, fileName)
+		} else {
+			returnValue = fmt.Sprintf(`{ "error": "%s: %v"}`, fileName, err)
+		}
+		return returnValue
+	}
+
+	pkgList, err := db.ListPackages()
+	if err != nil {
+		return fmt.Sprintf(`{ "error": "%s: %v"}`, fileName, err)
+	}
+
+	mySlice := []packageInfo{}
+	for _, pkg := range pkgList {
+		rpmdbPkg := new(packageInfo)
+		copier.Copy(rpmdbPkg, *pkg)
+		mySlice = append(mySlice, *rpmdbPkg)
+	}
+	data, _ := json.Marshal(mySlice)
+	return string(data)
+}
+
+func getrustAuditInternal(fileName string) string {
+	returnValue := `{ "error" : "Unknown" }`
+	r, err := os.Open(fileName)
+	if err != nil {
+		if pathErr := (*os.PathError)(nil); errors.As(err, &pathErr) && filepath.Clean(pathErr.Path) == filepath.Clean(fileName) {
+			returnValue = fmt.Sprintf(`{ "error": "path error:%v" }`, fileName)
+		} else {
+			returnValue = fmt.Sprintf(`{ "error": "%s: %v"}`, fileName, err)
+		}
+		return returnValue
+	}
+	defer r.Close()
+
+	pkgList, err := rustaudit.GetDependencyInfo(r)
+	if err != nil {
+		return fmt.Sprintf(`{ "error": "%s: %v"}`, fileName, err)
+	}
+	data, _ := json.Marshal(pkgList)
+	return string(data)
+}
+
+func getGoBuildInfoInternal(fileName string) string {
+	returnValue := `{ "error" : "Unknown" }`
+	bi, err := buildinfo.ReadFile(fileName)
+	if err != nil {
+		if pathErr := (*os.PathError)(nil); errors.As(err, &pathErr) && filepath.Clean(pathErr.Path) == filepath.Clean(fileName) {
+			returnValue = fmt.Sprintf(`{ "error": "path error:%v" }`, fileName)
+		} else {
+			returnValue = fmt.Sprintf(`{ "error": "%s: %v"}`, fileName, err)
+		}
+		return returnValue
+	}
+	data, _ := json.Marshal(bi)
+	return string(data)
+}
+
+func getGoMod(fileName string) string {
+	returnValue := `{ "error" : "Unknown" }`
+	f, err := os.Open(fileName)
+	if err != nil {
+		if pathErr := (*os.PathError)(nil); errors.As(err, &pathErr) && filepath.Clean(pathErr.Path) == filepath.Clean(fileName) {
+			returnValue = fmt.Sprintf(`{ "error": "path error:%v" }`, fileName)
+		} else {
+			returnValue = fmt.Sprintf(`{ "error": "%s: %v"}`, fileName, err)
+		}
+		return returnValue
+	}
+	defer f.Close()
+
+	goModData, err := io.ReadAll(f)
+	if err != nil {
+		return fmt.Sprintf(`{ "error": "%s: %v"}`, fileName, err)
+	}
+	modFileParsed, err := modfile.Parse("go.mod", goModData, nil)
+	if err != nil {
+		return fmt.Sprintf(`{ "error": "%s: %v"}`, fileName, err)
+	}
+	data, _ := json.Marshal(modFileParsed)
+	return string(data)
+}
+
+var _ = sqlite.Driver{}

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo.egg-info/PKG-INFO

@@ -0,0 +1,169 @@
+Metadata-Version: 2.4
+Name: pygorpmrustinfo
+Version: 0.1.0
+Summary: Unified Go-backed helpers for rpmdb, rust audit, and Go build metadata
+Home-page: https://github.com/MikeMoore63/pygorpmrustinfo
+Author: Mike Moore
+Author-email: z_z_zebra@yahoo.com
+License: MIT
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+# pygorpmrustinfo
+
+pygorpmrustinfo is a unified Python package that exposes the former rpmdb, rust audit, and Go build-info helpers through a single Go-backed extension.
+
+## Why this package exists
+
+The older split packages each relied on their own Go runtime and native extension. That approach is fragile in Python environments because Go's `c-shared` mode can be unstable when multiple Go runtimes are loaded into the same process. This is the problem described in [Go issue #65050](https://go.dev/issue/65050): loading multiple `c-shared` Go libraries in one process can lead to panics, crashes, or other runtime failures.
+
+This consolidation is meant to reduce that risk by keeping a single Go runtime in play, while also reducing memory usage compared with loading several separate native extensions.
+
+## Deprecation notice for the old scripts
+
+The legacy entry points and package names are being deprecated. The replacement package is pygorpmrustinfo, and the compatibility scripts remain available only for transition:
+
+- `get_go_info`
+- `get_rpm_info`
+- `get_rust_audit`
+- the older standalone package names for the previous split implementations
+
+These legacy scripts remain available for compatibility, but new work should target `pygorpmrustinfo` instead.
+
+## Installation
+
+```bash
+pip install pygorpmrustinfo
+```
+
+## Usage
+
+The package provides the same high-level functionality as the older helpers, but through one unified interface. If you are coming from the old packages, the main change is that you install and import one package instead of three separate ones.
+
+### CLI
+
+```bash
+get_go_info /path/to/go.mod
+get_rpm_info /path/to/Packages
+get_rust_audit /path/to/rust-binary
+```
+
+These scripts are preserved for compatibility, but the recommended path is to depend on `pygorpmrustinfo` directly.
+
+### Python API
+
+```python
+import json
+import pygorpmrustinfo
+
+# Go build metadata
+res = pygorpmrustinfo.get_go_build_info("/path/to/go.mod")
+print(json.dumps(res, indent=4))
+
+# RPM database metadata
+res = pygorpmrustinfo.get_rpm_db_info("/path/to/Packages")
+print(json.dumps(res, indent=4))
+
+# Rust audit metadata
+res = pygorpmrustinfo.get_rust_audit("/path/to/rust-binary")
+print(json.dumps(res, indent=4))
+```
+
+### Example: Go build info
+
+```python
+import pygorpmrustinfo
+
+info = pygorpmrustinfo.get_go_build_info("/path/to/go.mod")
+print(info["GoVersion"])
+print(info["Path"])
+```
+
+Example result:
+
+```python
+{
+    "GoVersion": "go1.18.4",
+    "Path": "github.com/example/project",
+    "Main": {
+        "Path": "github.com/example/project",
+        "Version": "(devel)",
+        "Sum": "",
+        "Replace": null
+    },
+    "Deps": []
+}
+```
+
+### Example: RPM database info
+
+```python
+import pygorpmrustinfo
+
+packages = pygorpmrustinfo.get_rpm_db_info("/path/to/Packages")
+for package in packages:
+    print(package.get("Name"), package.get("Version"))
+```
+
+Example result:
+
+```python
+[
+    {
+        "Name": "bash",
+        "Version": "5.1",
+        "Release": "1.el9"
+    }
+]
+```
+
+### Example: Rust audit info
+
+```python
+import pygorpmrustinfo
+
+packages = pygorpmrustinfo.get_rust_audit("/path/to/rust-binary")
+for package in packages.get("packages", []):
+    print(package.get("name"), package.get("version"))
+```
+
+Example result:
+
+```python
+{
+    "packages": [
+        {
+            "name": "serde",
+            "version": "1.0.197",
+            "kind": "build"
+        }
+    ]
+}
+```
+
+The functions always return a dictionary. On error you may see a structure like:
+
+```python
+{
+    "error": "path error:/path/to/missing/file"
+}
+```
+
+## Migration from the old packages
+
+If you previously used one of the older packages, the migration is straightforward:
+
+- replace `pyrpmdb` with `pygorpmrustinfo` and call `get_rpm_db_info(...)`
+- replace `pyrustaudit` with `pygorpmrustinfo` and call `get_rust_audit(...)`
+- replace `pygobuildinfo` with `pygorpmrustinfo` and call `get_go_build_info(...)`, `get_go_mod(...)`, or `get_go_sum(...)`
+
+For dependency declarations, update requirements, `pyproject.toml`, `setup.cfg`, or `setup.py` to depend on `pygorpmrustinfo` instead of the old package names.
+
+## Notes
+
+- The consolidation is primarily a stability and resource-usage improvement.
+- It is also a practical mitigation for the risks documented in [Go issue #65050](https://go.dev/issue/65050).
+- If you are maintaining older automation, consider switching to the unified package now so you are not tied to the deprecated script-based workflow.

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo.egg-info/SOURCES.txt

@@ -0,0 +1,26 @@
+LICENSE
+MANIFEST.in
+README.md
+get_go_info
+get_rpm_info
+get_rust_audit
+go.mod
+go.sum
+pyproject.toml
+setup.cfg
+setup.py
+src/pygobuildinfo/__init__.py
+src/pygorpmrustinfo/__init__.py
+src/pygorpmrustinfo/cli.py
+src/pygorpmrustinfo/pygorpmrustinfo.go
+src/pygorpmrustinfo.egg-info/PKG-INFO
+src/pygorpmrustinfo.egg-info/SOURCES.txt
+src/pygorpmrustinfo.egg-info/dependency_links.txt
+src/pygorpmrustinfo.egg-info/entry_points.txt
+src/pygorpmrustinfo.egg-info/not-zip-safe
+src/pygorpmrustinfo.egg-info/top_level.txt
+src/pygorpmrustinfo/_pyinstaller/__init__.py
+src/pyrpmdb/__init__.py
+src/pyrustaudit/__init__.py
+tests/test_legacy_imports.py
+tests/test_unified_api.py

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo.egg-info/entry_points.txt

@@ -0,0 +1,3 @@
+[pyinstaller40]
+hook-dirs = pygorpmrustinfo._pyinstaller:get_hook_dirs
+tests = pygorpmrustinfo._pyinstaller:get_PyInstaller_tests

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo.egg-info/not-zip-safe

@@ -0,0 +1 @@
+

pygorpmrustinfo-0.1.0/src/pygorpmrustinfo.egg-info/top_level.txt

@@ -0,0 +1,4 @@
+pygobuildinfo
+pygorpmrustinfo
+pyrpmdb
+pyrustaudit

pygorpmrustinfo-0.1.0/src/pyrpmdb/__init__.py

@@ -0,0 +1,15 @@
+from pygorpmrustinfo import (
+    get_go_build_info,
+    get_go_mod,
+    get_go_sum,
+    get_rpm_db_info,
+    get_rust_audit,
+)
+
+__all__ = [
+    "get_rpm_db_info",
+    "get_rust_audit",
+    "get_go_build_info",
+    "get_go_mod",
+    "get_go_sum",
+]

pygorpmrustinfo-0.1.0/src/pyrustaudit/__init__.py

@@ -0,0 +1,15 @@
+from pygorpmrustinfo import (
+    get_go_build_info,
+    get_go_mod,
+    get_go_sum,
+    get_rpm_db_info,
+    get_rust_audit,
+)
+
+__all__ = [
+    "get_rpm_db_info",
+    "get_rust_audit",
+    "get_go_build_info",
+    "get_go_mod",
+    "get_go_sum",
+]

pygorpmrustinfo-0.1.0/tests/test_legacy_imports.py

@@ -0,0 +1,28 @@
+import importlib
+
+import pygorpmrustinfo.cli as cli
+
+
+def test_legacy_package_imports_resolve():
+    for module_name in ["pyrpmdb", "pyrustaudit", "pygobuildinfo"]:
+        module = importlib.import_module(module_name)
+        assert module is not None
+
+
+def test_cli_defaults_to_legacy_script_modes(monkeypatch, tmp_path):
+    calls = []
+
+    def fake_dispatch(path, mode):
+        calls.append((path, mode))
+        return {"ok": True}
+
+    monkeypatch.setattr(cli, "_dispatch", fake_dispatch)
+    example = tmp_path / "example"
+    example.write_text("hello", encoding="utf-8")
+
+    cli.main(["/tmp/get_rpm_info", str(example)])
+    assert calls == [(str(example), "rpm")]
+
+    calls.clear()
+    cli.main(["/tmp/get_rust_audit", str(example)])
+    assert calls == [(str(example), "rust")]

pygorpmrustinfo-0.1.0/tests/test_unified_api.py

@@ -0,0 +1,27 @@
+import json
+
+from pygorpmrustinfo import (
+    get_go_build_info,
+    get_go_mod,
+    get_go_sum,
+    get_rpm_db_info,
+    get_rust_audit,
+)
+
+
+def test_unified_api_returns_error_dicts_for_missing_inputs():
+    assert isinstance(get_rpm_db_info("/tmp/does-not-exist"), dict)
+    assert isinstance(get_rust_audit("/tmp/does-not-exist"), dict)
+    assert isinstance(get_go_build_info("/tmp/does-not-exist"), dict)
+    assert isinstance(get_go_mod("/tmp/does-not-exist"), dict)
+    assert isinstance(get_go_sum("/tmp/does-not-exist"), dict)
+
+
+def test_go_sum_handles_invalid_go_sum_file():
+    result = get_go_sum("/tmp/does-not-exist")
+    assert result["error"] == "not a valid go sum file"
+
+
+def test_go_mod_returns_json_serializable_output():
+    payload = json.dumps(get_go_mod("/tmp/does-not-exist"))
+    assert isinstance(payload, str)