python-corekit 0.1.0__py3-none-any.whl → 0.1.1__py3-none-any.whl

corekit/config/settings.py

@@ -89,9 +89,9 @@ class CryptoSettings(BaseModel):
     """
     Hashing configuration.
 
-    ``salt`` has no default on purpose: the value that used to be hardcoded is
-    in git history and must be treated as compromised, so hashing raises until
-    one is supplied.
+    ``salt`` has no default on purpose. A salt shipped with a library is shared
+    by every install, which defeats the point of salting, so hashing raises
+    until one is supplied.
     """
 
     salt: str | None = None

corekit/crypto/constants.py

@@ -1,7 +1,7 @@
 HASH_JOINER = ":"
 EMPTY_HASH = ""
 
-# NOTE: a hardcoded CRYPTO_SALT previously lived here and is still present in this
-# repository's git history. It must be considered compromised and must never be
-# reintroduced. The salt is now supplied through configuration -- see
-# `corekit.config.CorekitSettings.crypto_salt` and `corekit.crypto.hasher.Hasher`.
+# There is deliberately no default salt. A salt shipped with a library is shared
+# by every install, which defeats the purpose of salting. Supply one through
+# configuration -- see `corekit.config.CorekitSettings.crypto_salt` and
+# `corekit.crypto.hasher.Hasher`.

{python_corekit-0.1.0.dist-info → python_corekit-0.1.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-corekit
-Version: 0.1.0
+Version: 0.1.1
 Summary: Shared foundations for Python projects: logging, benchmarking, registries, FastAPI routers/handlers, data stores, and ETL
 Author: Steven Jacobsen
 License-Expression: MIT
@@ -47,14 +47,12 @@ Requires Python 3.11+.
 pip install python-corekit
 ```
 
-No credentials, no SSH key, no token — which means a project that depends on
-corekit can be cloned and built by anyone, including inside a Docker build.
+The distribution is `python-corekit`; the import is `corekit`.
 
 Every dependency corekit needs is installed with it. There are no optional
 extras to remember, and no import that fails because something was left out.
 
-The distribution is `python-corekit`; the import is `corekit`. Pin a compatible
-release rather than tracking whatever is newest:
+Pin a compatible release rather than tracking whatever is newest:
 
 ```
 python-corekit~=0.1.0
@@ -371,7 +369,8 @@ Imports go downward only.
 
 ```
 corekit/
-  config.py  constants.py
+  config/                          settings, sources, loader
+  constants.py
 
   exceptions/                      error types
 
@@ -404,13 +403,13 @@ layering deliberately.
 ## Development
 
 ```bash
-pip install -e ".[dev,all]"
+pip install -e ".[dev]"
 pytest
 ruff format . && ruff check --fix .
 ```
 
-`tests/test_imports.py` imports every module in the package. Keep it passing:
-several modules were broken for months because nothing ever imported them.
+`tests/test_imports.py` imports every module in the package, so a module that
+nothing else happens to import still has to be importable.
 
 ## Licence
 

{python_corekit-0.1.0.dist-info → python_corekit-0.1.1.dist-info}/RECORD

@@ -11,7 +11,7 @@ corekit/concurrency/thread_local.py,sha256=Kh_bWuHzUwJ2jUr0JUCxaUSdahpBt8HvOwpgg
 corekit/concurrency/worker.py,sha256=QAwgucT9tadelFmb8io7J509zpQqlOvByHcVUVpveAM,1969
 corekit/config/__init__.py,sha256=dw2Y2HvpHw1MXwLSVxdARGPYse9j6IteVN3q70c3Kic,1227
 corekit/config/loader.py,sha256=KeEAgN0ZPcOQOwjzPQBFZXhhSI1tw9VAiFRWylFTtGY,5041
-corekit/config/settings.py,sha256=-Bnaa-37TDhXTC3lYE8jCQpG-Lre3K9OZd0wR1cBUD4,4818
+corekit/config/settings.py,sha256=Z-GB5Cj-gl23AbYT_3HHBfeWFXMQL9XX11p9gqWvcqk,4822
 corekit/config/sources.py,sha256=kdeji29XnEOaDGRctiwEfp7bKuA2jBYGbvAdVEs21KE,3923
 corekit/connections/__init__.py,sha256=MkQzfeh-0T-qNSLcA8ERHo61GOTpGzHm7s6HYh_pGIM,1090
 corekit/connections/connectable.py,sha256=d3ND7KZYXTw7iHHzmN3yvNGCzaDMI4S9kJHELdu4XV0,6525
@@ -31,7 +31,7 @@ corekit/connections/sql/migration/operations.py,sha256=iO3Qq4K3TBxS-K6I77w8BnIJ2
 corekit/connections/sql/migration/registry.py,sha256=_S3kFGJVGqwZFpy_ls3uYc9Q5yTODLmlpXF_GmMfTEY,6710
 corekit/connections/sql/migration/table.py,sha256=CpOkJl-4rcG2hTZYq-Yt7OvGTpVhVJ42IrubVO3BUvs,666
 corekit/crypto/__init__.py,sha256=dtu06iE3reJWRp99gOvV7QQ6iw5V8F7e4kU1CR8ppos,27
-corekit/crypto/constants.py,sha256=KALouS9fJKm5Ajk3Yco3aKyJ_LHHlJXWyPtLwwJTjiA,351
+corekit/crypto/constants.py,sha256=0rSSEpVKi9kBeza6Tq-5XK4LoWhEUyhrkKdcidZUEnc,299
 corekit/crypto/enum.py,sha256=0csj06cATCYDPY_QTNy66j_hB16WCqcHg8tJOO0lMNU,212
 corekit/crypto/hasher.py,sha256=qiJgeUsI2EeRLRPRf7YPY3ylZkRx3ZXfzsUk5Wg9uW4,2930
 corekit/data/__init__.py,sha256=y3VOJJwL4WKYxJcWIQooqCBjGV0xNAl_nKIDQYthN5w,1845
@@ -118,8 +118,8 @@ corekit/utils/raise_exc.py,sha256=pcG5rHUd96S4dG1IzoiDn9QD3pWEDbVv5ra_vha_aoA,18
 corekit/utils/time.py,sha256=070yexi-nMqsMyx6yaTNPm5pvonsWUvJj8mheFwUR1c,536
 corekit/utils/validators.py,sha256=EBRSIpVhuw_B-hJ9UVQU7W-nzPP49EkUE3mXCLhH2YE,355
 corekit/utils/void.py,sha256=qMyZ2jRsaH7C8M9eGXqmIdRmSFeontnsH-T7rBiT2BY,186
-python_corekit-0.1.0.dist-info/licenses/LICENSE,sha256=357LYxbxAQZ95q5cV-8JK6j-KNgiE6AteRodjEsm-kE,1072
-python_corekit-0.1.0.dist-info/METADATA,sha256=w9mKWBP5THi7Fnvlhc6pGRxd12UkHCPlA3PTqsuTgww,12097
-python_corekit-0.1.0.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-python_corekit-0.1.0.dist-info/top_level.txt,sha256=SDK4o8BoaI47E9tPbiNCbbWoc2y6N_wCjwnIEfr-GWI,8
-python_corekit-0.1.0.dist-info/RECORD,,
+python_corekit-0.1.1.dist-info/licenses/LICENSE,sha256=357LYxbxAQZ95q5cV-8JK6j-KNgiE6AteRodjEsm-kE,1072
+python_corekit-0.1.1.dist-info/METADATA,sha256=x6nMXzukrlJb_FTnRamfMiRtGa13ERzJJFG-38e0gzw,11972
+python_corekit-0.1.1.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+python_corekit-0.1.1.dist-info/top_level.txt,sha256=SDK4o8BoaI47E9tPbiNCbbWoc2y6N_wCjwnIEfr-GWI,8
+python_corekit-0.1.1.dist-info/RECORD,,