Skip to main content

EVERSE Research Software Fairness Checks

Project description

DOI Project Status: Active – The project has reached a stable, usable state and is being actively developed.

Research Software Fairness Checks (RSFC)

A command line interface to automatically evaluate the quality of a Github or Gitlab repository.

Authors: Daniel Garijo, Andrés Montero

Features

Given a repository URL, RSFC will perform a series of checks based on a list of research software quality indicators (RSQI). The RSQIs currently covered by the package are:

  • software_has_license
  • software_has_citation
  • has_releases
  • repository_workflows
  • version_control_use
  • requirements_specified
  • software_documentation
  • persistent_and_unique_identifier
  • descriptive_metadata
  • software_tests
  • archived_in_software_heritage
  • versioning_standards_use

For more information about these RSQIs, you can check https://github.com/EVERSE-ResearchSoftware/indicators. We have plans to implement all of the RSQIs available in that repository.

Requirements

Python 3.10.8 or higher

Dependencies are available in the requirements.txt or pyproject.toml file located in the root of the repository

Install from PyPI

Just run in your terminal the following command:

pip install rsfc

Install from Github with Poetry

To install the package, first clone the repository in your machine. This project uses Poetry for dependency and environment management.

git clone https://github.com/oeg-upm/rsfc.git

Go to the project's root directory

cd rsfc

Install Poetry (if you haven’t already)

curl -sSL https://install.python-poetry.org | python3 -

Make sure Poetry is available in your PATH

poetry --version

Create the virtual environment and install dependencies

poetry install

Activate the virtual environment (Optional)

source $(poetry env info --path)/bin/activate

Your terminal prompt should now show something like:

(rsfc-py3.11) your-user@your-machine rsfc %

With virtual environment activated you can tried like this:

rsfc --help

Without poetry virtual environment activated you need to use the poetry run:

poetry run rsfc --help

Docker installation

If preferred, RSFC can be executed using docker.

Once you have cloned the repository, go to the project's root directory and run the following command to build the image:

docker build -t rsfc-docker .

After that, it is necessary to create the directory in which the output assessment will be saved. You can do it by running the following command:

mkdir ./outputs

Finally, run the following command to run the container:

docker run --rm -v $(pwd)/outputs:/rsfc/outputs rsfc-docker --repo <repo_url>

where repo_url is the url of the repository to be analyzed, which is strictly needed.

Usage

After installation, you can use the package by running if you activated the poetry env

rsfc --repo <repo_url>

or like this without the poetry env

poetry run rsfc --repo <repo_url>

Also, if you want the output in OSTrails format, you can use the following flag

rsfc --repo <repo_url> --ftr

RSFC GitHub Action

This repository provides a reusable GitHub Action to run RSFC on a given repository.

Workflows

There are two key workflows:

  • run-rsfc.yml:
    Defines the main RSFC execution logic.
    Note: This workflow cannot be triggered directly because it uses on: workflow_call.
    It is designed to be reusable and must be invoked from another workflow.

  • call-rsfc.yml:
    A workflow file that triggers run-rsfc.yml. It must be placed in each repository that you want to analyze, since the repository where call-rsfc.yml is hosted is the one that will be processed.
    No additional inputs are required because the repository context is automatically passed by the call. This workflow can be triggered manually (workflow_dispatch) or automatically (e.g., on push events).

    • Secrets:
    • RSFC_TOKEN is optional but recommended if you plan to run multiple analyses or expect heavy usage. It allows RSFC to access private repositories and avoid rate limits.

Usage

To use RSFC in a repository:

  1. Copy call-rsfc.yml into .github/workflows/ of the repository you want to analyze.
  2. Ensure that the required secrets are defined (see below).
  3. No inputs are needed — the workflow automatically uses the repository it resides in.

Example:

name: Call RSFC reusable workflow

on:
  workflow_dispatch:   
  push:                

jobs:
  call-rsfc:
    uses: oeg-upm/rsfc/.github/workflows/run-rsfc.yml@main
    with:
      repo_url: https://github.com/${{ github.repository }}
    secrets:
      RSFC_TOKEN: ${{ secrets.RSFC_TOKEN }}

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

rsfc-0.0.6.tar.gz (26.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

rsfc-0.0.6-py3-none-any.whl (30.2 kB view details)

Uploaded Python 3

File details

Details for the file rsfc-0.0.6.tar.gz.

File metadata

  • Download URL: rsfc-0.0.6.tar.gz
  • Upload date:
  • Size: 26.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: poetry/2.2.1 CPython/3.10.19 Linux/6.11.0-1018-azure

File hashes

Hashes for rsfc-0.0.6.tar.gz
Algorithm Hash digest
SHA256 143b020a4f2425570d3860414396a2ddd670a857ce97e884676ccfc0e3234822
MD5 6861fd14a20a2d748b0e24d3f3010d92
BLAKE2b-256 025c904247acd29e54a3cc4937f4b5bb2c76278e9338b180b9186f607a065a41

See more details on using hashes here.

File details

Details for the file rsfc-0.0.6-py3-none-any.whl.

File metadata

  • Download URL: rsfc-0.0.6-py3-none-any.whl
  • Upload date:
  • Size: 30.2 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: poetry/2.2.1 CPython/3.10.19 Linux/6.11.0-1018-azure

File hashes

Hashes for rsfc-0.0.6-py3-none-any.whl
Algorithm Hash digest
SHA256 89b20de23e5c498cb604f3a279b28466dee24d44507bd80b1ad5c53b17fcbf10
MD5 1e12b21d553905d10ff1f0cdcc098425
BLAKE2b-256 c11ae37f6fffb10d71e034159ce5a0af12c5597505e062ac03fa5a6df900b976

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page