python-corekit 0.1.0__tar.gz → 0.1.1__tar.gz

{python_corekit-0.1.0/python_corekit.egg-info → python_corekit-0.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-corekit
-Version: 0.1.0
+Version: 0.1.1
 Summary: Shared foundations for Python projects: logging, benchmarking, registries, FastAPI routers/handlers, data stores, and ETL
 Author: Steven Jacobsen
 License-Expression: MIT
@@ -47,14 +47,12 @@ Requires Python 3.11+.
 pip install python-corekit
 ```
 
-No credentials, no SSH key, no token — which means a project that depends on
-corekit can be cloned and built by anyone, including inside a Docker build.
+The distribution is `python-corekit`; the import is `corekit`.
 
 Every dependency corekit needs is installed with it. There are no optional
 extras to remember, and no import that fails because something was left out.
 
-The distribution is `python-corekit`; the import is `corekit`. Pin a compatible
-release rather than tracking whatever is newest:
+Pin a compatible release rather than tracking whatever is newest:
 
 ```
 python-corekit~=0.1.0
@@ -371,7 +369,8 @@ Imports go downward only.
 
 ```
 corekit/
-  config.py  constants.py
+  config/                          settings, sources, loader
+  constants.py
 
   exceptions/                      error types
 
@@ -404,13 +403,13 @@ layering deliberately.
 ## Development
 
 ```bash
-pip install -e ".[dev,all]"
+pip install -e ".[dev]"
 pytest
 ruff format . && ruff check --fix .
 ```
 
-`tests/test_imports.py` imports every module in the package. Keep it passing:
-several modules were broken for months because nothing ever imported them.
+`tests/test_imports.py` imports every module in the package, so a module that
+nothing else happens to import still has to be importable.
 
 ## Licence
 

{python_corekit-0.1.0 → python_corekit-0.1.1}/README.md

@@ -12,14 +12,12 @@ Requires Python 3.11+.
 pip install python-corekit
 ```
 
-No credentials, no SSH key, no token — which means a project that depends on
-corekit can be cloned and built by anyone, including inside a Docker build.
+The distribution is `python-corekit`; the import is `corekit`.
 
 Every dependency corekit needs is installed with it. There are no optional
 extras to remember, and no import that fails because something was left out.
 
-The distribution is `python-corekit`; the import is `corekit`. Pin a compatible
-release rather than tracking whatever is newest:
+Pin a compatible release rather than tracking whatever is newest:
 
 ```
 python-corekit~=0.1.0
@@ -336,7 +334,8 @@ Imports go downward only.
 
 ```
 corekit/
-  config.py  constants.py
+  config/                          settings, sources, loader
+  constants.py
 
   exceptions/                      error types
 
@@ -369,13 +368,13 @@ layering deliberately.
 ## Development
 
 ```bash
-pip install -e ".[dev,all]"
+pip install -e ".[dev]"
 pytest
 ruff format . && ruff check --fix .
 ```
 
-`tests/test_imports.py` imports every module in the package. Keep it passing:
-several modules were broken for months because nothing ever imported them.
+`tests/test_imports.py` imports every module in the package, so a module that
+nothing else happens to import still has to be importable.
 
 ## Licence
 

{python_corekit-0.1.0 → python_corekit-0.1.1}/corekit/config/settings.py

@@ -89,9 +89,9 @@ class CryptoSettings(BaseModel):
     """
     Hashing configuration.
 
-    ``salt`` has no default on purpose: the value that used to be hardcoded is
-    in git history and must be treated as compromised, so hashing raises until
-    one is supplied.
+    ``salt`` has no default on purpose. A salt shipped with a library is shared
+    by every install, which defeats the point of salting, so hashing raises
+    until one is supplied.
     """
 
     salt: str | None = None

python_corekit-0.1.1/corekit/crypto/constants.py

@@ -0,0 +1,7 @@
+HASH_JOINER = ":"
+EMPTY_HASH = ""
+
+# There is deliberately no default salt. A salt shipped with a library is shared
+# by every install, which defeats the purpose of salting. Supply one through
+# configuration -- see `corekit.config.CorekitSettings.crypto_salt` and
+# `corekit.crypto.hasher.Hasher`.

{python_corekit-0.1.0 → python_corekit-0.1.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "python-corekit"
-version = "0.1.0"
+version = "0.1.1"
 description = "Shared foundations for Python projects: logging, benchmarking, registries, FastAPI routers/handlers, data stores, and ETL"
 readme = "README.md"
 requires-python = ">=3.11"

{python_corekit-0.1.0 → python_corekit-0.1.1/python_corekit.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-corekit
-Version: 0.1.0
+Version: 0.1.1
 Summary: Shared foundations for Python projects: logging, benchmarking, registries, FastAPI routers/handlers, data stores, and ETL
 Author: Steven Jacobsen
 License-Expression: MIT
@@ -47,14 +47,12 @@ Requires Python 3.11+.
 pip install python-corekit
 ```
 
-No credentials, no SSH key, no token — which means a project that depends on
-corekit can be cloned and built by anyone, including inside a Docker build.
+The distribution is `python-corekit`; the import is `corekit`.
 
 Every dependency corekit needs is installed with it. There are no optional
 extras to remember, and no import that fails because something was left out.
 
-The distribution is `python-corekit`; the import is `corekit`. Pin a compatible
-release rather than tracking whatever is newest:
+Pin a compatible release rather than tracking whatever is newest:
 
 ```
 python-corekit~=0.1.0
@@ -371,7 +369,8 @@ Imports go downward only.
 
 ```
 corekit/
-  config.py  constants.py
+  config/                          settings, sources, loader
+  constants.py
 
   exceptions/                      error types
 
@@ -404,13 +403,13 @@ layering deliberately.
 ## Development
 
 ```bash
-pip install -e ".[dev,all]"
+pip install -e ".[dev]"
 pytest
 ruff format . && ruff check --fix .
 ```
 
-`tests/test_imports.py` imports every module in the package. Keep it passing:
-several modules were broken for months because nothing ever imported them.
+`tests/test_imports.py` imports every module in the package, so a module that
+nothing else happens to import still has to be importable.
 
 ## Licence
 

python_corekit-0.1.0/corekit/crypto/constants.py

@@ -1,7 +0,0 @@
-HASH_JOINER = ":"
-EMPTY_HASH = ""
-
-# NOTE: a hardcoded CRYPTO_SALT previously lived here and is still present in this
-# repository's git history. It must be considered compromised and must never be
-# reintroduced. The salt is now supplied through configuration -- see
-# `corekit.config.CorekitSettings.crypto_salt` and `corekit.crypto.hasher.Hasher`.