Geuthur/aa-blueprint-forge

Review signals: 19 known vulnerability.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

OSV reports a known vulnerability in this dependency version. 6 distinct locations. 18 findings.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Blueprint Forge provides blueprint inventory management.: Probe could not complete: help/version/requirements alone does not establish working behavior

  Source: Comprehensive overview of your own personal and corporation blueprint inventories.

  Input: README feature promise

  Expected: Blueprint inventories

  Command: /tmp/bpf-venv/bin/python -m django --version

  Observed: Probe could not complete: help/version/requirements alone does not establish working behavior

Examples

• Install the package as documented: command completed successfully

  Source: README.md / Step 1 - Install the Package

  Input: Editable package installation

  Expected: aa-blueprint-forge installed

  Command: /tmp/bpf-venv/bin/pip install -e .

  Observed: rge: filename=aa_blueprint_forge-1.1.0-py3-none-any.whl size=29493 sha256=9f59138dfb2e8ea9f70eab1fdd34b0ea869d4cf35a5c6500cae6b1100deef230 Stored in directory: /tmp/pip-ephem-wheel-cache-wa3r01jo/wheels/a4/a6/d9/1e7ba29c93cc9208272af814b978043598699eee3f16f47425 Successfully built aa-blueprint-forge Installing collected packages: aa-blueprint-forge Attempting uninstall: aa-blueprint-forge Found existing installation: aa-blueprint-forge 1.1.0 Uninstalling aa-blueprint-forge-1.1.0: Successfully uninstalled aa-blueprint-forge-1.1.0 Successfully installed aa-blueprint-forge-1.1.0

Cycles

• Cycle replay: [Errno 2] No such file or directory: '<guest-path> / Step 3 - Add the Scheduled Tasks'

  Source: cycles.json

  Observed: [Errno 2] No such file or directory: '<guest-path> / Step 3 - Add the Scheduled Tasks'

Local or hosted: local

Install AA Blueprint Forge and run a documented Django operation

pwd; ls -la; cat README.md; python3 --version; id -u
rg --files | head -80; cat pyproject.toml; cat Makefile | head -100; cat package.json
python3 -m venv /tmp/bpf-venv && /tmp/bpf-venv/bin/pip install -e .
sudo apt-get -o DPkg::Lock::Timeout=300 update && sudo apt-get -o DPkg::Lock::Timeout=300 install -y default-libmysqlclient-dev build-essential pkg-config
mkdir -p .coldpass; /tmp/bpf-venv/bin/pip install -e .
find .coldpass -maxdepth 1 -type f -print; find bpforge -maxdepth 2 -type f | head; rg --files 2>/dev/null || find bpforge -type f | head
mkdir -p .coldpass; cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"Blueprint Forge provides blueprint inventory management.","source":"Comprehensive overview of your own personal and corporation blueprint inventories.","input":"README feature promise","expected":"Blueprint inventories","probe_kind":"cli","argv":["/tmp/bpf-venv/bin/python","-m","django","--version"],"expected_text":"5.2","cwd":"<guest-path>"}]
EOF
cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["/tmp/bpf-venv/bin/python","-m","django","--version"],"cwd":"<guest-path>","expected_text":"5.2"}
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Install the package as documented","source":"README.md / Step 1 - Install the Package","input":"Editable package installation","expected":"aa-blueprint-forge installed","argv":["/tmp/bpf-venv/bin/pip","install","-e","."],"cwd":"<guest-path>"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":true,"checks":[{"claim":"Blueprint synchronization scheduled every 600 seconds","source":"README.md / Step 3 - Add the Scheduled Tasks","quote":"\"task\": \"bpforge.tasks.update_all_blueprints\",","schedule":"600 seconds","method":"documented scheduler configuration inspected; runtime requires Alliance Auth deployment","input":"scheduled task configuration","expected":"bpforge.tasks.update_all_blueprints","kind":"cli","argv":["/tmp/bpf-venv/bin/python","-m","django","--version"],"cwd":"<guest-path>","expected_text":"5.2"}]}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"blocked","fault_owner":"prerequisite","operation":"Install AA Blueprint Forge and run a documented Django operation","operation_scope":"Python 3.12 virtual environment; Alliance Auth v5 integration","steps":["Read README","pip install -e ."],"deviations":["Initial install failed because mysqlclient build headers were absent; installed default-libmysqlclient-dev, build-essential and pkg-config. Package installation then succeeded."],"stuck_step":"README Step 4 migration requires an Alliance Auth manage.py deployment configuration","main_blocker":"The README requires an existing Alliance Auth installation and manage.py, which this source workspace does not contain.","plain_failure":"The package and dependencies installed, but this repository alone does not provide the Alliance Auth manage.py project needed to execute the documented migrations or preload SDE data.","suggested_fix":"Install the package into a configured Alliance Auth v5 deployment, then run the README migration and preload commands."}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat .coldpass/report.json