dmzoneill/pling-publisher

No problems traced to this repository code in these checks.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Build an archive from the current folder.: Real input produced the expected result: Created zip file: /tmp/pling-sample/dist/archive-

  Source: pling build # build an archive from the current folder.

  Input: /tmp/pling-sample containing item.txt

  Expected: Creates a ZIP archive containing item.txt

  Command: /tmp/pling-venv/bin/pling build --directory /tmp/pling-sample

  Observed: Created zip file: /tmp/pling-sample/dist/archive-1793122171.zip

Examples

• Build an archive from a sample folder: command completed successfully

  Source: README.md, How to use

  Input: sample directory with item.txt

  Expected: Created ZIP archive in dist

  Command: /tmp/pling-venv/bin/pling build --directory /tmp/pling-sample

  Observed: Created zip file: /tmp/pling-sample/dist/archive-1793122171.zip

Local or hosted: local

Build a ZIP archive from a directory with `pling build --directory <PATH>`.

pwd; id -u; rg --files -g 'README*' -g 'pyproject.toml' -g 'package.json' -g 'requirements*.txt' -g 'Makefile' -g 'Cargo.toml' -g 'go.mod' -g 'AGENTS.md' -g '.github/workflows/**' | head -80
find . -maxdepth 3 -type f | head -100
cat README.md; cat pyproject.toml; cat setup.py; cat .github/workflows/main.yml; python3 --version
sed -n '1,260p' pling_publisher/cli.py; sed -n '1,260p' pling_publisher/utils.py; cat Makefile; mkdir -p .coldpass
python3 -m venv /tmp/pling-venv && /tmp/pling-venv/bin/python -m pip install --upgrade pip && /tmp/pling-venv/bin/python -m pip install .
mkdir -p /tmp/pling-sample && printf 'sample payload\n' > /tmp/pling-sample/item.txt && /tmp/pling-venv/bin/pling build /tmp/pling-sample
cd <guest-path> && /tmp/pling-venv/bin/pling build
cd <guest-path> && /tmp/pling-venv/bin/pling build --help; ls -l dist; cat .gitignore
cd <guest-path> && rm -rf dist && /tmp/pling-venv/bin/pling build --directory /tmp/pling-sample; unzip -l /tmp/pling-sample/dist/*.zip
cd <guest-path> && /tmp/pling-venv/bin/pling build --directory /tmp/pling-sample; python3 - <<'PY'
import json
p='<guest-path>'
argv=['/tmp/pling-venv/bin/pling','build','--directory','/tmp/pling-sample']
probe={'kind':'cli','argv':argv,'cwd':'<guest-path>','expected_text':'Created zip file: /tmp/pling-sample/dist/archive-','output_directory':'/tmp/pling-sample/dist'}
claim={'kind':'claim','claim':'Build an archive from the current folder.','source':'pling build # build an archive from the current folder.','input':'/tmp/pling-sample containing item.txt','expected':'Creates a ZIP archive containing item.txt','probe_kind':'cli','argv':argv,'cwd':'<guest-path>','expected_text':'Created zip file: /tmp/pling-sample/dist/archive-','output_directory':'/tmp/pling-sample/dist'}
example={'kind':'example','claim':'Build an archive from a sample folder','source':'README.md, How to use','input':'sample directory with item.txt','expected':'Created ZIP archive in dist','argv':argv,'cwd':'<guest-path>','expected_text':'Created zip file: /tmp/pling-sample/dist/archive-','output_directory':'/tmp/pling-sample/dist'}
for n,x in [('probe.json',probe),('claims.json',[claim]),('examples.json',[example]),('cycles.json',{'detected':False,'reason':'Inspected README and CLI entry points; product provides build and publish commands, with no scheduler or cycle trigger.','checks':[]})]:
 open(p+'/'+n,'w').write(json.dumps(x,indent=2)+'\n')
PY
rm -rf /tmp/pling-sample/dist
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
python3 - <<'PY'
import json
p='<guest-path>'
r={'outcome':'working','fault_owner':None,'operation':'Build a ZIP archive from a directory with `pling build --directory <PATH>`.','operation_scope':'Python 3.12.3 in /tmp/pling-venv; local archive generation only. Publishing requires Pling account credentials and was not attempted.','steps':['Read README.md; confirmed Python requirement from pyproject.toml (Python ^3.10).','Installed the package with `/tmp/pling-venv/bin/python -m pip install .`.','Ran `pling build` and then built a sample folder; verified item.txt was inside the generated ZIP.','Validated and replayed probe, README claim, example and cycle assessment successfully.'],'deviations':['The README gives `pling build` without flags; the CLI accepts a directory via `--directory`, while passing it positionally produced an unexpected extra argument error. The probe uses the supported option.'],'stuck_step':None,'main_blocker':None,'plain_failure':None,'suggested_fix':None}
open(p,'w').write(json.dumps(r,indent=2)+'\n')
PY
rm -rf /tmp/pling-sample/dist