puller flag and cleanup (#34)

Author: bwireman

.github/workflows/ci.yml

@@ -34,6 +34,7 @@ jobs:
           gleam-version: ${{ env.gleam }}
           rebar3-version: ${{ env.rebar }}
       - run: gleam test --target erlang
+      - run: gleam run --target erlang -- --puller wget
       - run: gleam run --target erlang -- --outdated
 
   windows-erlang:
@@ -67,7 +68,8 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20.x, 22.x, 23.x]
+        node-version: [22.x, 23.x]
+        puller: [curl, wget]
     steps:
       - uses: actions/checkout@v4
       - uses: erlef/setup-beam@v1
@@ -82,7 +84,7 @@ jobs:
           cache: "npm"
       - run: npm install
       - run: gleam test --target javascript --runtime nodejs
-      - run: gleam run --target javascript --runtime nodejs -- --outdated
+      - run: gleam run --target javascript --runtime nodejs -- --outdated --puller ${{ matrix.puller }}
 
   bun:
     runs-on: ubuntu-latest
@@ -96,6 +98,7 @@ jobs:
       - uses: oven-sh/setup-bun@v1
       - run: bun install
       - run: gleam test --target javascript --runtime bun
+      - run: gleam run --target javascript --runtime bun -- --puller wget
       - run: gleam run --target javascript --runtime bun -- --outdated
 
   deno:
@@ -112,4 +115,5 @@ jobs:
           deno-version: v2.x # Run with latest stable Deno.
       - run: deno install
       - run: gleam test --target javascript --runtime deno
+      - run: gleam run --target javascript --runtime deno -- --puller wget
       - run: gleam run --target javascript --runtime deno -- --outdated

README.md

@@ -52,7 +52,8 @@ gleam run -m go_over
 
 - `--format` FORMAT: Specify the output format of any warnings, [minimal,
   verbose, json] (default: None)
-- `--puller` Specify the tool used to reach out to hex.pm, [curl, wget, httpie] (default: None)
+- `--puller` Specify the tool used to reach out to hex.pm, [curl, wget, httpie]
+  (default: None)
 - `--force`: Force pulling new data even if the cached data is still valid
 - `--outdated`: Additionally check if newer versions of dependencies exist
 - `--ignore-indirect`: Ignore all warnings for indirect dependencies

gleam.toml

@@ -1,5 +1,5 @@
 name = "go_over"
-version = "3.0.0"
+version = "3.0.1"
 licences = ["MIT"]
 repository = { type = "github", user = "bwireman", repo = "go-over" }
 description = "A tool to audit Erlang & Elixir dependencies, to make sure your Gleam ✨ projects really sparkle!"

src/go_over/config.gleam

@@ -11,6 +11,7 @@ import gleam/string
 import go_over/advisories/advisories.{type Advisory}
 import go_over/hex/puller
 import go_over/packages.{type Package}
+import go_over/util/constants
 import go_over/util/print
 import go_over/warning.{type Warning}
 import gxyz/cli
@@ -224,7 +225,13 @@ fn toml_as_string(toml: Toml) -> Option(String) {
   }
 }
 
-// ? want to head the `fake` flag but otherwise use the default help
+const logo = "                       ____  ____      ____ _   _____  _____
+                        / __ `/ __ \\    / __ \\ | / / _ \\/ ___/
+                       / /_/ / /_/ /   / /_/ / |/ /  __/ /
+                       \\__, /\\____/____\\____/|___/\\___/_/
+                      /____/     /_____/"
+
+// ? want to hide the `fake` flag but otherwise use the default help
 fn help_message(args: arg_info.ArgInfo) -> String {
   arg_info.ArgInfo(
     named: args.named,
@@ -234,15 +241,8 @@ fn help_message(args: arg_info.ArgInfo) -> String {
   )
   |> arg_info.help_text(
     "go_over",
-    "                       ____  ____      ____ _   _____  _____
-                        / __ `/ __ \\    / __ \\ | / / _ \\/ ___/
-                       / /_/ / /_/ /   / /_/ / |/ /  __/ /
-                       \\__, /\\____/____\\____/|___/\\___/_/
-                      /____/     /_____/
-version 3.0.0
-"
-    |> print.format_high()
-      <> "🕵️ Audit Erlang & Elixir dependencies, to make sure your gleam projects really ✨ sparkle!",
+    print.format_high(logo <> "\tversion: " <> constants.version <> "\n")
+      <> "🕵️Audit Erlang & Elixir dependencies, to make sure your gleam projects really ✨ sparkle!",
   )
   // ? strip out the pointless leading go_over in the help message
   |> string.crop(" ")
@@ -262,7 +262,7 @@ pub fn merge_flags_and_config(flags: Flags, cfg: Config) -> Config {
     fake: flags.fake,
     verbose: flags.verbose,
     allowed_licenses: cfg.allowed_licenses,
-    puller: cfg.puller,
+    puller: option.unwrap(flags.puller, cfg.puller),
     global:,
     format: option.unwrap(flags.format, cfg.format),
     ignore_packages: cfg.ignore_packages,

src/go_over/util/cache.gleam

@@ -3,6 +3,7 @@ import filepath
 import gleam/int
 import gleam/order
 import gleam/result
+import go_over/util/constants
 import go_over/util/print
 import gxyz/cli
 import simplifile
@@ -64,7 +65,7 @@ pub fn pull_if_not_cached(
 
       path
       |> version_name()
-      |> simplifile.write("3.0.0")
+      |> simplifile.write(constants.version)
       |> cli.hard_fail_with_msg("could not write cache file for " <> path)
 
       Nil

src/go_over/util/constants.gleam

@@ -7,6 +7,8 @@ pub const hour = 3600
 
 pub const six_hours = 21_600
 
+pub const version = "3.0.1"
+
 pub const advisories_repo = "mirego/elixir-security-advisories"
 
 pub const long_ass_dashes = "\n-----------------------------------------------\n"