Skip to main content
IzVerifier
==========

Static spec file verification for IzPack installers.

Purpose
-------

IzVerifier is a tool that tests izpack installers for incorrectly defined or missing specifications. IzVerifier also
parses the source code of any custom classes used by the installer to ensure that no undefined izpack specifications
are referenced. Finally, IzVerifier can also perform a graph search of the installers' conditions dependency trees to
find cycles or missing items. Currently supported speficiation types are conditions, variables, strings, and custom
classes.

Compatibility
-------------

IzVerifier is a work-in-progress in its early stages, currently compatible with both v4 and v5 Izpack installers.

Installation
------------

Use pip to install:

$ pip install IzVerifier

Usage
-----

IzVerifier takes a dictionary of arguments in the following form:

args = {
'specs_path': path # Path to specs folder for installer.
'resources_path': path # Path to root resources folder for installer.
'pom': path # Path to the installer project's pom.xml file.
'sources': [path1, path2, ...] # Path(s) to associated source code roots.
}

Instantiate the IzVerifier, then call its verification methods:

>>> from IzVerifier.izverifier import IzVerifier
>>> izv = IzVerifier(args)
>>> izv.verify_all(verbosity=1)

IzVerifier methods:

verify_all(verbosity=0, filter_classes=False):
Run verification tests on all installer specs.
Setting filter_classes=true will make IzVerifier filter the results so that only undefined references located in
source files that were referenced by the specification files or imported explicitly in those files are returned.
Returns a set of all references that are undefined.

verify(specification, verbosity=0, filter_classes=False):
Run verification tests on the given specification.
Setting filter_classes=true will make IzVerifier filter the results so that only undefined references located in
source files that were referenced by the specification files or imported explicitly in those files are returned.
Returns a set of all references for the given spec that are undefined.

dependency_verification(verbosity=0, filter_classes=False):
Runs a condition dependencies graph search on all conditions referenced by the specs
of the installer.
Setting filter_classes=true will make IzVerifier filter the results so that only undefined references located in
source files that were referenced by the specification files or imported explicitly in those files are returned.
Returns a dictionary which maps the condition id to a set of tuples containing paths to missing dependencies.
The dictionary will be of the form:
{
'condition_id1': {
((node1, type),(node2, type)...),
((node1, type),(node2, type)...),
...
},
...
}

get_referenced(specification):
Returns a mapping for the given specification of all referenced items (defined or undefined) to the files they
are referenced in.
The verify(specification) method must have run prior to calling get_referenced for the mapping to be filled.
The mapping is in the form:
{
'id1': {file1, file2, ...},
'id2': {filea, fileb, ...},
...
}


IzVerifier is meant to work out of the box for Installers that follow Izpack V5 specification conventions, but its
classes and containers can be customized for less conventional sets of installation specs. Some use cases:

Adding custom methods to IzVerifier's string searches:

>>> izstrings = izv.get_container('strings')
>>> izstrings.properties['patterns'].append(('myCustomStringMethod\({0}\)', 'myCustomStringMethod\(({0})\)'))
>>> izv.verify('strings', verbosity=2)

Specifying custom paths to specification files, resource files, or langpacks:

>>> izv = IzVerifier(args)
>>> izv.paths.langpacks['eng.xml'] = 'path/to/eng.xml'
>>> izv.verify('strings')


Contributing
------------

Setting up to hack on IzVerifier is fairly simple:

+ Fork your own copy of the repo, then clone it locally.
+ From the root of the IzVerifier repo, pip install the project as an "editable":


$ pip install -e .

Now importing and calling IzVerifier as in the Usage guide above will use the version in your repo, so you can modify
and immediately see the changes in your code without re-installing or upgrading the package.

Pull requests for tests, improvements, and documentation are welcome.

Metadata

Release files for IzVerifier 0.0.4.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for IzVerifier 0.0.4.1
File Size Uploaded Provenance Actions
IzVerifier-0.0.4.1.tar.gz 23.3 kB Without provenance Details for IzVerifier-0.0.4.1.tar.gz

Release files / IzVerifier-0.0.4.1.tar.gz

Download URL IzVerifier-0.0.4.1.tar.gz
Size 23.3 kB
Tags Source
SHA-256 checksum
How to use checksums
c1ca03894430baa42e773ecf423d63b6afb52a5d60cfc8a865fa5a68676cba06
BLAKE2b-256 checksum
How to use checksums
36d963426a2376007f2c39447b7d5ece451006c1264ea6df6c0e4401869c7e3c
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No

Security for IzVerifier 0.0.4.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page