{"id":17310505,"url":"https://github.com/kpcyrd/updlockfiles","last_synced_at":"2025-04-14T13:32:29.456Z","repository":{"id":61560167,"uuid":"552501417","full_name":"kpcyrd/updlockfiles","owner":"kpcyrd","description":"Manage lockfiles in PKGBUILDs for upstreams that don't ship them, `updpkgsums` for dependency trees (Arch Linux tooling)","archived":false,"fork":false,"pushed_at":"2024-07-03T21:47:39.000Z","size":41,"stargazers_count":11,"open_issues_count":0,"forks_count":1,"subscribers_count":4,"default_branch":"main","last_synced_at":"2024-11-01T04:28:48.547Z","etag":null,"topics":["archlinux","reproducible-builds","supply-chain-security"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kpcyrd.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null},"funding":{"github":["kpcyrd"]}},"created_at":"2022-10-16T18:29:36.000Z","updated_at":"2024-07-03T21:47:42.000Z","dependencies_parsed_at":"2022-10-19T22:45:33.643Z","dependency_job_id":null,"html_url":"https://github.com/kpcyrd/updlockfiles","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kpcyrd%2Fupdlockfiles","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kpcyrd%2Fupdlockfiles/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kpcyrd%2Fupdlockfiles/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kpcyrd%2Fupdlockfiles/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kpcyrd","download_url":"https://codeload.github.com/kpcyrd/updlockfiles/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":223634176,"owners_count":17176879,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["archlinux","reproducible-builds","supply-chain-security"],"created_at":"2024-10-15T12:37:27.337Z","updated_at":"2024-11-08T05:01:31.250Z","avatar_url":"https://github.com/kpcyrd.png","language":"Rust","funding_links":["https://github.com/sponsors/kpcyrd"],"categories":[],"sub_categories":[],"readme":"# updlockfiles\n\nManage lockfiles for packages that don't ship any upstream. Like `updpkgsums`\nbut for 3rd party dependency trees.\n\nIf you're not actively maintaining Arch Linux packages you likely don't need\nthis tool.\n\n## Getting started\n\nAdd a function like this to your PKGBUILD:\n```sh\nupdlockfiles() {\n  cd ${pkgname}\n  rm -f composer.lock\n  composer update\n  cp composer.lock \"${outdir}/\"\n}\n```\n\nThis works for arbitrary files, just make sure the files you want copied back\nneed to be copied into `$outdir`.\n\nNext run this command (no arguments needed, the default should _just work_):\n```\nupdlockfiles\n```\n\nFinally add the new file to your source array (and make sure it's part of your next commit!):\n```\nsource=(\"git+https://github.com/vimeo/psalm.git#commit=${_commit}\"\n        \"composer.lock\")\n```\n\nUpdate the checksums for content pinning:\n```\nupdpkgsums\n```\n\n## Update a lockfile\n\nIf the initial setup was done before you can generate a new lockfile of the latest patch level like this:\n```\nupdlockfiles\n```\n\n## License\n\nGPLv3+\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkpcyrd%2Fupdlockfiles","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkpcyrd%2Fupdlockfiles","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkpcyrd%2Fupdlockfiles/lists"}