mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
feat: Add support for pip Package Manager (#33)
* feat/init-pip-cmd * feat: Add PyPi resolver * test: Add tests for pypi and pypi_resolver * refactor: unify package dependency resolution and improve PyPI version handling using registry adapter * chore: remove unused file Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> * feat: add Python dependency parsing with extras support * refactor(deps): Improve PyPI dependency resolution and add custom resolver support * chore: remove extra file * fix: improve dependency resolution and package deduplication * chore: remove extra print statement * chore: typo fix * feat: support PyPi package extras * test: add test for pypi dependency parse function * fix: remove overwritten of parsedCmd * chore: remove extra print statement * chore: typo fix * feat: support PyPi package extras * test: add test for pypi dependency parse function * fix: remove overwritten of parsedCmd * refactor: enhance code readability & remove extra code * chore: remove extra code * Update cmd/npm/npm.go Co-authored-by: Omkar Phansopkar <omkarphansopkar@gmail.com> Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> * Update cmd/npm/pnpm.go Co-authored-by: Omkar Phansopkar <omkarphansopkar@gmail.com> Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> * Update cmd/pypi/pip.go Co-authored-by: Omkar Phansopkar <omkarphansopkar@gmail.com> Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> --------- Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> Co-authored-by: Omkar Phansopkar <omkarphansopkar@gmail.com>
This commit is contained in:
Sahil Bansal
co-authored by
Omkar Phansopkar
Omkar Phansopkar
parent
4031219375
commit
53783c6604
@@ -0,0 +1,202 @@
|
||||
package packagemanager
|
||||
|
||||
import (
|
||||
"context"
|
||||
"fmt"
|
||||
"testing"
|
||||
|
||||
packagev1 "buf.build/gen/go/safedep/api/protocolbuffers/go/safedep/messages/package/v1"
|
||||
"github.com/safedep/dry/semver"
|
||||
"github.com/stretchr/testify/require"
|
||||
)
|
||||
|
||||
func TestPypiDependencyResolver_ResolveLatestVersion(t *testing.T) {
|
||||
cases := []struct {
|
||||
name string
|
||||
pkg *packagev1.Package
|
||||
assertFn func(t *testing.T, pv *packagev1.PackageVersion, err error)
|
||||
}{
|
||||
{
|
||||
name: "should resolve latest version for a package",
|
||||
pkg: &packagev1.Package{
|
||||
Name: "requests",
|
||||
Ecosystem: packagev1.Ecosystem_ECOSYSTEM_PYPI,
|
||||
},
|
||||
assertFn: func(t *testing.T, pv *packagev1.PackageVersion, err error) {
|
||||
require.NoError(t, err)
|
||||
require.True(t, semver.IsAhead("2.30.0", pv.Version))
|
||||
},
|
||||
},
|
||||
{
|
||||
name: "should return an error if the package is not found",
|
||||
pkg: &packagev1.Package{
|
||||
Name: "nonexistent-package-12345",
|
||||
Ecosystem: packagev1.Ecosystem_ECOSYSTEM_PYPI,
|
||||
},
|
||||
assertFn: func(t *testing.T, pv *packagev1.PackageVersion, err error) {
|
||||
require.Error(t, err)
|
||||
require.Nil(t, pv)
|
||||
},
|
||||
},
|
||||
}
|
||||
|
||||
for _, tc := range cases {
|
||||
t.Run(tc.name, func(t *testing.T) {
|
||||
resolver, err := NewPypiDependencyResolver(NewDefaultPypiDependencyResolverConfig())
|
||||
require.NoError(t, err)
|
||||
|
||||
pv, err := resolver.ResolveLatestVersion(context.Background(), tc.pkg)
|
||||
tc.assertFn(t, pv, err)
|
||||
})
|
||||
}
|
||||
}
|
||||
|
||||
func TestPipGetLatestMatchingVersion(t *testing.T) {
|
||||
cases := []struct {
|
||||
name string
|
||||
packageName string
|
||||
versionConstraint string
|
||||
assertFn func(t *testing.T, version string, err error)
|
||||
}{
|
||||
{
|
||||
name: "should resolve exact version",
|
||||
packageName: "requests",
|
||||
versionConstraint: "==2.28.0",
|
||||
assertFn: func(t *testing.T, version string, err error) {
|
||||
require.NoError(t, err)
|
||||
require.Equal(t, "==2.28.0", version)
|
||||
},
|
||||
},
|
||||
{
|
||||
name: "should resolve compatible version",
|
||||
packageName: "requests",
|
||||
versionConstraint: "~=2.26.0",
|
||||
assertFn: func(t *testing.T, version string, err error) {
|
||||
require.NoError(t, err)
|
||||
require.NotEmpty(t, version)
|
||||
fmt.Println("Version: ", version)
|
||||
require.True(t, semver.IsAheadOrEqual("2.26.0", version) && !semver.IsAhead("2.27.0", version))
|
||||
},
|
||||
},
|
||||
{
|
||||
name: "should return error for nonexistent package",
|
||||
packageName: "nonexistent-package-12345",
|
||||
versionConstraint: ">=1.0.0",
|
||||
assertFn: func(t *testing.T, version string, err error) {
|
||||
require.Error(t, err)
|
||||
require.Empty(t, version)
|
||||
},
|
||||
},
|
||||
}
|
||||
|
||||
for _, tc := range cases {
|
||||
t.Run(tc.name, func(t *testing.T) {
|
||||
version, err := pipGetMatchingVersion(tc.packageName, tc.versionConstraint)
|
||||
tc.assertFn(t, version, err)
|
||||
})
|
||||
}
|
||||
}
|
||||
|
||||
func TestPypiParseDependency(t *testing.T) {
|
||||
tests := []struct {
|
||||
name string
|
||||
input string
|
||||
wantName string
|
||||
wantVersion string
|
||||
wantExtra string
|
||||
}{
|
||||
{
|
||||
name: "simple package without version",
|
||||
input: "requests",
|
||||
wantName: "requests",
|
||||
wantVersion: "",
|
||||
wantExtra: "",
|
||||
},
|
||||
{
|
||||
name: "package with exact version",
|
||||
input: "requests==2.28.1",
|
||||
wantName: "requests",
|
||||
wantVersion: "==2.28.1",
|
||||
wantExtra: "",
|
||||
},
|
||||
{
|
||||
name: "package with greater than version",
|
||||
input: "django>=4.2.0",
|
||||
wantName: "django",
|
||||
wantVersion: ">=4.2.0",
|
||||
wantExtra: "",
|
||||
},
|
||||
{
|
||||
name: "package with less than version",
|
||||
input: "pylint<3.0.0",
|
||||
wantName: "pylint",
|
||||
wantVersion: "<3.0.0",
|
||||
wantExtra: "",
|
||||
},
|
||||
{
|
||||
name: "package with not equal version",
|
||||
input: "pytest!=3.0.0",
|
||||
wantName: "pytest",
|
||||
wantVersion: "!=3.0.0",
|
||||
wantExtra: "",
|
||||
},
|
||||
{
|
||||
name: "package with compatible release version",
|
||||
input: "sphinx~=4.0.0",
|
||||
wantName: "sphinx",
|
||||
wantVersion: "~=4.0.0",
|
||||
wantExtra: "",
|
||||
},
|
||||
{
|
||||
name: "package with extra",
|
||||
input: "requests;extra=='security'",
|
||||
wantName: "requests",
|
||||
wantVersion: "",
|
||||
wantExtra: "security",
|
||||
},
|
||||
{
|
||||
name: "package with version and extra",
|
||||
input: "requests>=2.28.1;extra=='security'",
|
||||
wantName: "requests",
|
||||
wantVersion: ">=2.28.1",
|
||||
wantExtra: "security",
|
||||
},
|
||||
{
|
||||
name: "package with single quotes in extra",
|
||||
input: "django>=4.2.0;extra=='testing'",
|
||||
wantName: "django",
|
||||
wantVersion: ">=4.2.0",
|
||||
wantExtra: "testing",
|
||||
},
|
||||
{
|
||||
name: "package with double quotes in extra",
|
||||
input: "django>=4.2.0;extra==\"testing\"",
|
||||
wantName: "django",
|
||||
wantVersion: ">=4.2.0",
|
||||
wantExtra: "testing",
|
||||
},
|
||||
{
|
||||
name: "package with multiple version constraints",
|
||||
input: "requests>=2.28.1,<3.0.0",
|
||||
wantName: "requests",
|
||||
wantVersion: ">=2.28.1,<3.0.0",
|
||||
wantExtra: "",
|
||||
},
|
||||
}
|
||||
|
||||
for _, tt := range tests {
|
||||
t.Run(tt.name, func(t *testing.T) {
|
||||
gotName, gotVersion, gotExtra := pypiParseDependency(tt.input)
|
||||
|
||||
if gotName != tt.wantName {
|
||||
t.Errorf("pypiParseDependency() gotName = %v, want %v", gotName, tt.wantName)
|
||||
}
|
||||
if gotVersion != tt.wantVersion {
|
||||
t.Errorf("pypiParseDependency() gotVersion = %v, want %v", gotVersion, tt.wantVersion)
|
||||
}
|
||||
if gotExtra != tt.wantExtra {
|
||||
t.Errorf("pypiParseDependency() gotExtra = %v, want %v", gotExtra, tt.wantExtra)
|
||||
}
|
||||
})
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user