What is this?
A basic Content Addressable aRchive (CAR) v1 reader and writer. Enough to get you reading from the ATProto firehose and emitting blocks from your own PDS. More details on ATProto's CAR usage here.
Installation
pip install carbox
Basic Usage
from datetime import datetime
from carbox.car import Block, read_car, write_car
from carbox.message import read_event_pair
import dag_cbor
# Where websocket_msg is a message comes from the firehose.
header, event = read_event_pair(websocket_msg)
roots, blocks = read_car(event['blocks'])
records = [dag_cbor.decode(block) for block in blocks]
record = {
'$type': 'app.bsky.feed.post',
'text': 'Hello, world!',
'createdAt': datetime.now().isoformat(),
}
block = Block(decoded=record)
car_bytes = write_car(block.cid, [block])
Changelog
0.3 - 2024-03-16
- Relax dependencies to allow minor version upgrades.
0.2 - 2023-09-07
Add write support via car.write_car. See usage example above for details.
0.0.1 - 2023-05-07
Initial release.
Release instructions
Here's how to package, test, and ship a new release.
-
Run the unit tests.
source [path_to_virtualenv]/bin/activate.csh pytest
-
Bump the version number in
pyproject.toml.git grepthe old version number to make sure it only appears in the changelog. Change the current changelog entry inREADME.mdfor this new version from unreleased to the current date. -
git commit -am 'release vX.Y' -
Upload to test.pypi.org for testing.
poetry build setenv ver X.Y twine upload -r pypitest dist/carbox-$ver*
-
Install from test.pypi.org.
cd /tmp python3 -m venv local source local/bin/activate.csh # make sure we force pip to use the uploaded version pip3 uninstall carbox pip3 install --upgrade pip pip3 install -i https://test.pypi.org/simple --extra-index-url https://pypi.org/simple carbox==$ver deactivate
-
Smoke test that the code trivially loads and runs:
from carbox.car import Block, read_car, write_car block = Block(decoded={'foo': ['bar', 2, 3.14]}) car_bytes = write_car([block.cid], [block]) assert read_car(car_bytes) == ([block.cid], [block])
-
Tag the release in git. In the tag message editor, delete the generated comments at bottom, leave the first line blank (to omit the release "title" in github), put
### Notable changeson the second line, then copy and paste this version's changelog contents below it.git tag -a v$ver --cleanup=verbatim git push && git push --tags
-
Click here to draft a new release on GitHub. Enter
vX.Yin the Tag version box. Leave Release title empty. Copy### Notable changesand the changelog contents into the description text box. -
Upload to pypi.org!
twine upload dist/carbox-$ver*
Metadata
Release files for carbox 0.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| carbox-0.3.tar.gz | 13.4 kB | Without provenance | Details for carbox-0.3.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| carbox-0.3-py3-none-any.whl | Python 3 | none | any | Details for carbox-0.3-py3-none-any.whl |
Total release size: 27.0 kB
Release files / carbox-0.3.tar.gz
| Download URL | carbox-0.3.tar.gz |
|---|---|
| Size | 13.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
f19eb5a456a378073e6ca31c4ba0a6a30249f49c94850c60e5aecb2dcc5544ba
|
|
BLAKE2b-256 checksum How to use checksums |
be0c38765d95b1b96c87f566b7b157d9608d77b0190883af4cf6863bee299f27
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/5.0.0 CPython/3.12.2
|
Release files / carbox-0.3-py3-none-any.whl
| Download URL | carbox-0.3-py3-none-any.whl |
|---|---|
| Size | 13.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3ca4d2a3e50ff4c807673e354dc6704c9ec8b61929629dbfa803d4e56e87451d
|
|
BLAKE2b-256 checksum How to use checksums |
dd8e81fa3a426c135bfc17a972e9f8a9fd14cc5af17bef756d7b2d2e061d7001
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/5.0.0 CPython/3.12.2
|
Security for carbox 0.3
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.