LOBSTER
The Lightweight Open BMW Software Traceability Evidence Report allows you to demonstrate software traceability and requirements coverage, which is essential for meeting standards such as ISO 26262.
This package contains the core LOBSTER tools: the basic API and tools for generating reports.
Tools
You can generate a report linking everything together with lobster-report.
The report is in JSON, but you can generate more readable versions of it
with additional tools:
-
lobster-online-report: Postprocess a*.lobsterreport to contain GitHub references instead of local file references. Repository information must partly be provided as configuration parameters, and is partly retrieved by calling thegittool. Note that the tool only works in combination with submodules if the.gitmodulesfile of the repository uses HTTPS urls instead of SSH.If your
.gitmoduleslooks like this, you can use this tool:[submodule "farm-with-palms"] path = coconut/farm url = ../farm-with-palms branch = .
But if your file contains URLs ending on
.git, you cannot use this tool. It will build invalid URLs. -
lobster-online-report-nogit: This tool is similar tolobster-online-report, but it does not call thegittool to obtain information about the repository. Instead, it relies solely on information provided by the user through command line arguments. The user has to provide- the git hash,
- the remote repository URL,
- the local path to the repository.
The tool then replaces local paths in a given LOBSTER report file with URLs to the corresponding files in the remote repository.
This tool is handy when
lobster-online-reportcannot be used. This could be the case in a continuous integration (CI) system where access togitis restricted for security reasons. Imagine a CI job that runs with high credentials. It could be important to prevent manipulations of the git history by the CI job, and as a consequence access togitis restricted for the job runner. -
lobster-html-report: Generate an HTML report -
lobster-ci-report: Generate a compiler-message like output, useful for CI
Requirements
lobster-online-report needs git 1.7.8 or higher to support git submodules.
Copyright & License information
The copyright holder of LOBSTER is the Bayerische Motoren Werke Aktiengesellschaft (BMW AG), and LOBSTER is published under the GNU Affero General Public License, Version 3.
Several LOBSTER tools rely on other tools to process data and extract tracing tags. These tools are run-time (but not link or program) dependencies. Their copyright and license is as follows:
The LOBSTER HTML report generator lobster-html-report includes some
of the Feather Icons in the report it
generates. The Feather Icons are licensed under the MIT
License.
The LOBSTER HTML report generator lobster-html-report uses dot
from the graphviz project to produce some of
the pictures it includes in the report it generates. Graphviz is
licensed under the Common Public License, Version
1.0.
Metadata
Release files for bmw-lobster-core 1.0.6
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| bmw_lobster_core-1.0.6-py3-none-any.whl | Python 3 | none | any | Details for bmw_lobster_core-1.0.6-py3-none-any.whl |
Release files / bmw_lobster_core-1.0.6-py3-none-any.whl
| Download URL | bmw_lobster_core-1.0.6-py3-none-any.whl |
|---|---|
| Size | 69.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
84dc86cf12711849cf69c07a10c37def34a6f170ac187f354f4d58120630987d
|
|
BLAKE2b-256 checksum How to use checksums |
9fb64c9863d961b916eef8811891b78666d528f7348c8d09707fa40ef7ed0fe7
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 30, 2026.
Transparency logSecurity for bmw-lobster-core 1.0.6
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 1 file in this release has been uploaded with provenance metadata.
Attestation for bmw_lobster_core-1.0.6-py3-none-any.whl
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 30, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.