Skip to content

Commit 8f35bc2

Browse files
committed
improve readme
1 parent 552eb3e commit 8f35bc2

File tree

3 files changed

+30
-12
lines changed

3 files changed

+30
-12
lines changed

.gitignore

+1-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
*.ez
33
/build
44
erl_crash.dump
5-
/.go-over
5+
.go-over/
66
node_modules/
77
.vscode
88
key._

README.md

+26-10
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,38 @@
1-
# go_over
1+
# 🕵️‍♂️ go_over
22

33
[![Package Version](https://img.shields.io/hexpm/v/go_over)](https://hex.pm/packages/go_over)
44
[![Hex Docs](https://img.shields.io/badge/hex-docs-ffaff3)](https://hexdocs.pm/go_over/)
55

6+
A tool to check for Erlang & Elixir dependency advisories as well as retired hex packages, to make sure you gleam projects really sparkle! ✨
7+
8+
🚨 _**NOTE**_: security advisories are _NOT_ currently monitored for gleam dependencies. The language, while excellent, is far too new and niche
9+
10+
# Install
11+
612
```sh
713
gleam add go_over
814
```
9-
```gleam
10-
import go_over
1115

12-
pub fn main() {
13-
// TODO: An example of the project in use
14-
}
16+
and add `.go-over/` to your `.gitignore`
17+
18+
# Usage
19+
20+
```sh
21+
gleam run -m go_over
1522
```
1623

17-
Further documentation can be found at <https://hexdocs.pm/go_over>.
24+
## Caching
25+
26+
- Security advisory data is cached for six hours
27+
- hex.pm retired package data is cached for one hour
28+
29+
# Other Art
30+
31+
- As I'm sure is no surprise this tool is inspired by (and all around worse than) [mirego/mix_audit](https://github.com/mirego/mix_audit). Please check it out!
32+
- It also draws inspiration from [mix hex.audit](https://hexdocs.pm/hex/Mix.Tasks.Hex.Audit.html)
33+
34+
# License
1835

19-
UNDER CONSTRUCTION!!
20-
uses https://github.com/mirego/elixir-security-advisories which is licensed with `BSD-3-Clause license` and uses data inside the packages directory is pulled from GitHub API, it is licensed under the terms of the CC-BY 4.0 open source license. See GitHub documentation for the full terms.
36+
This tool uses [mirego/elixir-security-advisories](https://github.com/mirego/elixir-security-advisories) which is it self licensed with `BSD-3-Clause license` and `CC-BY 4.0 open source license`. See their [#license section](https://github.com/mirego/elixir-security-advisories?tab=readme-ov-file#license)
2137

22-
Code original to this repo is Licensed under MIT
38+
Code original to this repo is Licensed under MIT

src/go_over.gleam

+3-1
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ pub fn main() {
4545
case list.append(retired_packages, vulnerable_packages) {
4646
[] ->
4747
shellout.style(
48-
"✅ All good! ✨",
48+
"✅ All good! ✨\n\n",
4949
with: shellout.color(["brightgreen"]),
5050
custom: [],
5151
)
@@ -67,6 +67,8 @@ pub fn main() {
6767
})
6868
|> string.join("\n-----------------------------------------------\n")
6969
|> io.print
70+
71+
shellout.exit(1)
7072
}
7173
}
7274
}

0 commit comments

Comments
 (0)