Skip to main content

LOBSTER

The Lightweight Open BMW Software Traceability Evidence Report allows you to demonstrate software traceability and requirements coverage, which is essential for meeting standards such as ISO 26262.

This package contains the core LOBSTER tools: the basic API and tools for generating reports.

Tools

You can generate a report linking everything together with lobster-report. The report is in JSON, but you can generate more readable versions of it with additional tools:

  • lobster-online-report: Postprocess a *.lobster report to contain GitHub references instead of local file references. Repository information must partly be provided as configuration parameters, and is partly retrieved by calling the git tool. Note that the tool only works in combination with submodules if the .gitmodules file of the repository uses HTTPS urls instead of SSH.

    If your .gitmodules looks like this, you can use this tool:

    [submodule "farm-with-palms"]
      path = coconut/farm
      url = ../farm-with-palms
      branch = .
    

    But if your file contains URLs ending on .git, you cannot use this tool. It will build invalid URLs.

  • lobster-online-report-nogit: This tool is similar to lobster-online-report, but it does not call the git tool to obtain information about the repository. Instead, it relies solely on information provided by the user through command line arguments. The user has to provide

    • the git hash,
    • the remote repository URL,
    • the local path to the repository.

    The tool then replaces local paths in a given LOBSTER report file with URLs to the corresponding files in the remote repository.

    This tool is handy when lobster-online-report cannot be used. This could be the case in a continuous integration (CI) system where access to git is restricted for security reasons. Imagine a CI job that runs with high credentials. It could be important to prevent manipulations of the git history by the CI job, and as a consequence access to git is restricted for the job runner.

  • lobster-html-report: Generate an HTML report

  • lobster-ci-report: Generate a compiler-message like output, useful for CI

Requirements

lobster-online-report needs git 1.7.8 or higher to support git submodules.

The copyright holder of LOBSTER is the Bayerische Motoren Werke Aktiengesellschaft (BMW AG), and LOBSTER is published under the GNU Affero General Public License, Version 3.

Several LOBSTER tools rely on other tools to process data and extract tracing tags. These tools are run-time (but not link or program) dependencies. Their copyright and license is as follows:

The LOBSTER HTML report generator lobster-html-report includes some of the Feather Icons in the report it generates. The Feather Icons are licensed under the MIT License.

The LOBSTER HTML report generator lobster-html-report uses dot from the graphviz project to produce some of the pictures it includes in the report it generates. Graphviz is licensed under the Common Public License, Version 1.0.

Metadata

Release files for bmw-lobster-core 1.0.6

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distribution (wheel)

Table of built distributions (wheels) for bmw-lobster-core 1.0.6
File Interpreter ABI Platform Actions
bmw_lobster_core-1.0.6-py3-none-any.whl Python 3 none any Details for bmw_lobster_core-1.0.6-py3-none-any.whl

Release files / bmw_lobster_core-1.0.6-py3-none-any.whl

Download URL bmw_lobster_core-1.0.6-py3-none-any.whl
Size 69.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
84dc86cf12711849cf69c07a10c37def34a6f170ac187f354f4d58120630987d
BLAKE2b-256 checksum
How to use checksums
9fb64c9863d961b916eef8811891b78666d528f7348c8d09707fa40ef7ed0fe7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jul 30, 2026.

Transparency log

Security for bmw-lobster-core 1.0.6

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 1 file in this release has been uploaded with provenance metadata.

Attestation for bmw_lobster_core-1.0.6-py3-none-any.whl

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jul 30, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

1.0.6 This release

1 release file Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page