Skip to main content

my-reposmith-bootstrap

Bootstrap runner package for RepoSmith.

This project provides a governed installer for the RepoSmith toolchain. It is intentionally lightweight and does not expose RepoSmith as Python dependencies. Instead, it installs locked versions explicitly at runtime.

This is a runner package, not a framework or library.


What this package does

When executed, my-reposmith-bootstrap will:

  • Install reposmith-core (locked version)
  • Install reposmith-extensions (locked version)
  • Install reposmith-cli (locked version, without dependency resolution)
  • Use explicit package indexes (Forgejo + PyPI)
  • Avoid modifying global pip configuration

All decisions about versions and order are enforced by the bootstrap itself.


Install

pip install -U my-reposmith-bootstrap

Setup RepoSmith

After installation, run:

my-reposmith-setup

Once completed, RepoSmith will be available:

reposmith --help
reposmith version

Governed installation model

This package intentionally:

  • ❌ Does not list reposmith-* packages in dependencies
  • ❌ Does not rely on pip dependency resolution
  • ❌ Does not modify global pip config
  • ✅ Pins exact versions internally
  • ✅ Uses explicit --index-url and --extra-index-url
  • ✅ Acts as a single authoritative installation contract

This ensures:

  • Reproducible installs
  • No hidden upgrades
  • No accidental dependency drift

Package indexes

The bootstrap installs packages from:

  • Primary: RepoSmith Forgejo PyPI
  • Fallback: Public PyPI

Indexes are passed explicitly per install command and are never persisted.


Supported platforms

  • Windows (PowerShell)
  • Linux
  • macOS

On Windows, restart the shell if the reposmith command is not found immediately after running the bootstrap.


What this package is NOT

  • ❌ Not a RepoSmith SDK
  • ❌ Not a library to import
  • ❌ Not a dependency manager
  • ❌ Not a virtual environment manager

Its only responsibility is bootstrapping RepoSmith correctly.


Versioning

This package follows semantic versioning:

  • Patch: internal bootstrap fixes
  • Minor: controlled upgrade of locked RepoSmith versions
  • Major: change in bootstrap contract

License

MIT License © 2026 TamerOnLine

Metadata

Release files for my-reposmith-bootstrap 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for my-reposmith-bootstrap 0.1.0
File Size Uploaded Provenance
my_reposmith_bootstrap-0.1.0.tar.gz 4.1 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for my-reposmith-bootstrap 0.1.0
File Interpreter ABI Platform
my_reposmith_bootstrap-0.1.0-py3-none-any.whl Python 3 none any Details

Total release size: 8.7 kB

Release files / my_reposmith_bootstrap-0.1.0.tar.gz

Download URL my_reposmith_bootstrap-0.1.0.tar.gz
Size 4.1 kB
Tags Source
SHA-256 checksum
How to use checksums
c604e97ac8ca38d2d791bb6e9bd344fa55b3cf03d4e90432970f7d86eda65ae2
BLAKE2b-256 checksum
How to use checksums
60ca3b0f4e3f57ee2db64384d5e8d9702d3f0591cd818d376f65598aeefafd5c
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.7

Release files / my_reposmith_bootstrap-0.1.0-py3-none-any.whl

Download URL my_reposmith_bootstrap-0.1.0-py3-none-any.whl
Size 4.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
b5f389cd9fa06eeaa5c2ad52d163f00bbe4e2b4f20886a41e2415a8463bc8f33
BLAKE2b-256 checksum
How to use checksums
ccca9c3a0df6d40a475b089c24bec688bb722157d8856e746f8a48b54ec553e8
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.7

Security for my-reposmith-bootstrap 0.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.1.0 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page