Skip to main content

Gruff

Gruff is an opinionated, deterministic maintainability linter for Python. It complements Ruff with project policies that make agent-assisted code easier to understand and review; it does not infer who or what wrote the code.

Installation

Requires Python 3.10 or later.

pip install gruff

Or with uv:

uv tool install gruff

Verify it works:

gruff --version

Quick start

Enable the baseline rules in pyproject.toml:

[tool.gruff.lint]
select = ["GR:baseline"]

Then check the current directory:

gruff check .

All rules are opt-in. Each rule belongs to a tier that states what adopting it costs. Start with the baseline rules, then add opinionated rules one code at a time. GR:baseline, GR:opinionated, and GR:api-shaping select a whole tier. GR enables every Gruff rule, including the API-shaping tier. A check with no enabled rules succeeds but warns that it performed no policy analysis.

Rules at a glance

The first release tests eleven theses: inputs are easier to trace when definitions declare how callers pass them, non-public behavior is easier to review when callers supply every value, package initializer manifests are easier to review when every public import path defines __all__, constants are easier to review when uppercase names and Final annotations always appear together, non-public definitions are easier to understand when their names carry their purpose, comments are worth reading when they state more than the code beneath them, tests are worth running when an exception can still fail them, a body is easier to follow when its trailing condition inverts into a guard, a branch is easier to verify when its condition states the positive form, a non-public module binding is easier to find when it lives in the one definition that reads it, and public instance data is easier to review when properties declare its interface.

Baseline

Few projects disagree with these rules. A fix usually stays inside one module, but GR004 can rename a constant that other code imports, and a GR014 fix renames a name across modules.

Code Rule Policy
GR002 no-uniform-non-public-defaults Some calls in its module pass a module-private default and others omit it.
GR003 package-dunder-all Every public package import path defines __all__.
GR004 final-constants Uppercase names and Final annotations appear together.
GR007 no-subsumed-comments One-line comments state something beyond the statements they annotate.
GR008 no-exception-swallowing-tests Tests let exceptions propagate instead of swallowing them.
GR014 no-non-public-imports Non-public names stay inside the module that defines them.

Opinionated

These rules take a style position that some projects reject. A fix usually stays inside the project, but GR012's getter-only property fix stops outside code from assigning the attribute.

Code Rule Policy
GR001 explicit-non-public-input-conventions Every fixed input to a non-public callable has an explicit calling convention.
GR006 no-non-public-docstrings Non-public definitions carry their purpose in their names instead of docstrings.
GR009 no-guarded-tails Trailing conditions invert into guards instead of nesting the rest of the body.
GR010 positive-branch-conditions Branch conditions state the positive form instead of negating around an else.
GR011 no-single-consumer-module-bindings Non-public module bindings live in the one definition that reads them.
GR012 explicit-instance-data Public instance data is explicit through class-body annotations or properties.
GR013 keyword-only-non-public-inputs Every fixed input to a non-public callable is keyword-only.

API-shaping

Fixing a finding changes a public signature, which can break callers outside the project. On a published library, adopt these rules with a major release.

Code Rule Policy
GR005 explicit-public-input-conventions Every fixed input to a public callable has an explicit calling convention.

Each rule links to its rule doc, which states what the rule flags, why, an example, and when to suppress. gruff rule GR004 prints the same document in the terminal, and gruff rule --all --output-format json emits every rule and its tier for tooling.

Documentation

The documentation site carries the rule docs, and its configuration page covers pyproject.toml, the command-line reference, suppressing findings, and the recommended Ruff pairing.

Distribution

Gruff releases use PyPI wheels for Linux x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64. Gruff is not published to crates.io.

Metadata

Release files for gruff 0.2.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distributions (wheels)

Table of built distributions (wheels) for gruff 0.2.3
File Actions
gruff-0.2.3-py3-none-win_amd64.whl Python 3 none Windows x86-64 Details for gruff-0.2.3-py3-none-win_amd64.whl
gruff-0.2.3-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl Python 3 none Linux glibc 2.17+ x86-64 Details for gruff-0.2.3-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
gruff-0.2.3-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl Python 3 none Linux glibc 2.17+ ARM64 Details for gruff-0.2.3-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
gruff-0.2.3-py3-none-macosx_11_0_arm64.whl Python 3 none macOS 11.0+ ARM64 Details for gruff-0.2.3-py3-none-macosx_11_0_arm64.whl
gruff-0.2.3-py3-none-macosx_10_12_x86_64.whl Python 3 none macOS 10.12+ x86-64 Details for gruff-0.2.3-py3-none-macosx_10_12_x86_64.whl

Total release size: 10.3 MB

Release files / gruff-0.2.3-py3-none-win_amd64.whl

Download URL gruff-0.2.3-py3-none-win_amd64.whl
Size 2.1 MB
Tags Python 3 Windows x86-64
SHA-256 checksum
How to use checksums
c0d59d3cb9b01558bb6537ad48ab45532117494761a48e3d3080cc605ffa98d3
BLAKE2b-256 checksum
How to use checksums
3d0cad57fda78fff42f0a1289e76ba2d4caa6092a8c9898d023bd4a68ee529d3
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.

Transparency log

Release files / gruff-0.2.3-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Download URL gruff-0.2.3-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Size 2.1 MB
Tags Linux glibc 2.17+ x86-64 Python 3
SHA-256 checksum
How to use checksums
4e7df683c87eaa429bdd999bd9c8dcec67faa893964a845e82fa0e12f4533abe
BLAKE2b-256 checksum
How to use checksums
640e230f319ac2fc8f69302ff3e63a9478d6962e584a8c1eded32ffd1ae5303e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.

Transparency log

Release files / gruff-0.2.3-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Download URL gruff-0.2.3-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Size 2.0 MB
Tags Linux glibc 2.17+ ARM64 Python 3
SHA-256 checksum
How to use checksums
71a75d0a845c5a5b6f49b06e64b78a485e7a9d446dd7525b42688f4269b040b3
BLAKE2b-256 checksum
How to use checksums
8e1dd1955923bde3f99deacdf5fbf182e9db22a5d0cf47ea7690f26322e93c58
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.

Transparency log

Release files / gruff-0.2.3-py3-none-macosx_11_0_arm64.whl

Download URL gruff-0.2.3-py3-none-macosx_11_0_arm64.whl
Size 2.0 MB
Tags Python 3 macOS 11.0+ ARM64
SHA-256 checksum
How to use checksums
17599f4381fd8132dd792c54af26f60e564c75ba28907772a21b9fbb24f14e96
BLAKE2b-256 checksum
How to use checksums
fefded8ef09f237247530101c5deb9a0e1cf2d11a427d0e0b0430727cd4f7577
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.

Transparency log

Release files / gruff-0.2.3-py3-none-macosx_10_12_x86_64.whl

Download URL gruff-0.2.3-py3-none-macosx_10_12_x86_64.whl
Size 2.1 MB
Tags Python 3 macOS 10.12+ x86-64
SHA-256 checksum
How to use checksums
734b32aa5e9ae2005aeb4552e0765cec360c9534fdc9b42ae164427161be8cc9
BLAKE2b-256 checksum
How to use checksums
3183f2cac00e062fb4d60b56a6ba437d9b154698dd2c514eefe3020dc13b86f1
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.

Transparency log

Security for gruff 0.2.3

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 5 files in this release have been uploaded with provenance metadata.

Select from 5 files

Attestation for gruff-0.2.3-py3-none-win_amd64.whl

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page