pygremlinbox-gpl-3-0 2.0.2

Supply chain security testing package with GPL-3.0 licence

pygremlinbox-gpl-3-0

This is a benign GremlinBox supply-chain security simulation package. It performs no malicious action and is safe to install into a development or production build to validate detection tooling. It is part of the GremlinBox project, a controlled corpus used to exercise dependency scanners, licence-policy enforcement, and supply-chain security platforms.

Purpose

This package implements the SPDX licence identifier GPL-3.0 and embeds the full official licence text. It is intended for testing licence detection, licence-policy enforcement, and SPDX compliance checks. A scanner that inspects direct or transitive dependencies should detect this licence.

Installation

pip install pygremlinbox-gpl-3-0

Usage

import pygremlinbox_gpl_3_0 as pkg

pkg.get_licence_identifier()    # "GPL-3.0"
pkg.retrieve_licence_content()  # full licence text
pkg.get_package_metadata()      # dict: name, version, licence, spdx_licence_id

What it does and does not do

• Does: return its SPDX licence identifier, the full licence text, and package metadata.
• Does not: contact the network, collect data, execute code at install time, or take any other action.

Project

Part of the GremlinBox supply-chain security testing project: https://github.com/gocortexio/gremlinbox

Licence

GPL-3.0. See the LICENCE file in this package.