{"id":15017898,"url":"https://github.com/bincrafters/bincrafters-package-tools","last_synced_at":"2025-09-01T08:06:28.055Z","repository":{"id":46259049,"uuid":"116430761","full_name":"bincrafters/bincrafters-package-tools","owner":"bincrafters","description":"A modular toolset for Conan Package Tools - Build your recipes easily on CI","archived":false,"fork":false,"pushed_at":"2025-08-18T20:32:42.000Z","size":253,"stargazers_count":16,"open_issues_count":0,"forks_count":17,"subscribers_count":10,"default_branch":"develop","last_synced_at":"2025-08-18T22:26:30.423Z","etag":null,"topics":["conan","conan-tools","hacktoberfest","python","testing"],"latest_commit_sha":null,"homepage":"https://pypi.python.org/pypi/bincrafters-package-tools","language":"Python","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bincrafters.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2018-01-05T21:58:31.000Z","updated_at":"2025-08-18T20:32:40.000Z","dependencies_parsed_at":"2023-12-11T14:58:40.288Z","dependency_job_id":null,"html_url":"https://github.com/bincrafters/bincrafters-package-tools","commit_stats":{"total_commits":364,"total_committers":21,"mean_commits":"17.333333333333332","dds":0.5659340659340659,"last_synced_commit":"f947a63934e4dc77fb0c0d720b8e51bb9f149df9"},"previous_names":[],"tags_count":77,"template":false,"template_full_name":null,"purl":"pkg:github/bincrafters/bincrafters-package-tools","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bincrafters%2Fbincrafters-package-tools","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bincrafters%2Fbincrafters-package-tools/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bincrafters%2Fbincrafters-package-tools/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bincrafters%2Fbincrafters-package-tools/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bincrafters","download_url":"https://codeload.github.com/bincrafters/bincrafters-package-tools/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bincrafters%2Fbincrafters-package-tools/sbom","scorecard":{"id":238527,"data":{"date":"2025-08-11","repo":{"name":"github.com/bincrafters/bincrafters-package-tools","commit":"be53de5d66dda1a9eeb78d268776cd9d67f2b1b8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/9 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/package-tools.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package-tools.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/bincrafters/bincrafters-package-tools/package-tools.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package-tools.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/bincrafters/bincrafters-package-tools/package-tools.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package-tools.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/bincrafters/bincrafters-package-tools/package-tools.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package-tools.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/bincrafters/bincrafters-package-tools/package-tools.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/package-tools.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/bincrafters/bincrafters-package-tools/package-tools.yml/develop?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/package-tools.yml:20","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: MIT License: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(main) error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T06:12:11.397Z","repository_id":46259049,"created_at":"2025-08-17T06:12:11.397Z","updated_at":"2025-08-17T06:12:11.397Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273093223,"owners_count":25044436,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["conan","conan-tools","hacktoberfest","python","testing"],"created_at":"2024-09-24T19:51:09.316Z","updated_at":"2025-09-01T08:06:28.036Z","avatar_url":"https://github.com/bincrafters.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Build status](https://github.com/bincrafters/bincrafters-package-tools/workflows/bincrafters-package-tools/badge.svg)](https://github.com/bincrafters/bincrafters-package-tools/actions)\n[![Codecov](https://codecov.io/gh/bincrafters/bincrafters-package-tools/branch/main/graph/badge.svg)](https://codecov.io/gh/bincrafters/bincrafters-package-tools)\n[![Pypi Download](https://img.shields.io/badge/download-pypi-blue.svg)](https://pypi.python.org/pypi/bincrafters-package-tools)\n\n# Bincrafters Package Tools\n\n## A modular toolset for [Conan Package Tools](https://github.com/conan-io/conan-package-tools)\n\nThis project contains files used by Conan Package Tools for all kinds of bincrafters builds.\n\nThese scripts are used during build process to allow for rapid testing and prototyping at this time.\n\n\n### INSTALL\nTo install by pip is just one step\n\n### Local\nIf you want to install by local copy\n\n    pip install .\n\n### Remote\nOr if you want to download our pip package\n\n    pip install bincrafters_package_tools\n\n\n### ENVIRONMENT VARIABLES\nAll variables supported by Conan package tools, are treated by Bincrafters package tools as well.\nTo solve the upload, some variables are customized by default:\n\n**CONAN_UPLOAD**: https://bincrafters.jfrog.io/artifactory/api/conan/public-conan  \n**CONAN_REFERENCE**: Fields **name** and **version** from conanfile.py  \n**CONAN_USERNAME**: Get from CI env vars. Otherwise, use **bincrafters**  \n**CONAN_VERSION**: Get from CI env vars.  \n**CONAN_VERSION**: Field **version** from conanfile.py  \n**CONAN_UPLOAD_ONLY_WHEN_STABLE**: True for default template. False for Boost builds.  \n**CONAN_STABLE_BRANCH_PATTERN**: stable/\\*  \n**CONAN_ARCHS**: Only x86_64 per default. To build 32-bit and 64-bit use e.g. [x86_64, x86]\n\n___\n\n**BPT SPECIFIC ENVIRONMENT VARIBLES**:\n\n**BPT_MATRIX_SPLIT_BY_BUILD_TYPES**: Splits build jobs into `Release` and `Debug` build jobs.\n**BPT_MATRIX_DISCARD_DUPLICATE_BUILD_IDS**: `true`/`false`, default: `true`. This does NOT YET what it says. Right now, this only has an effect for installer_only and header_only recipes when set to `false`. In those cases, you get the full build matrix, instead of a shortened build matrix. In the future, the matrix generation actually compares build IDs and discards jobs based on the IDs.\n\n___\n\n\n#### Testing and Development\nTo install extra packages required to test\n\n    pip install .[test]\n\n\n#### TESTING\nTo run all unit test + code coverage, just execute:\n\n    pip install -r bincrafters/requirements_test.txt\n    cd tests\n    pytest -v --cov=bincrafters\n\n\n#### LICENSE\n[MIT](LICENSE.md)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbincrafters%2Fbincrafters-package-tools","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbincrafters%2Fbincrafters-package-tools","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbincrafters%2Fbincrafters-package-tools/lists"}