Add a command to verify several properties of a framework · tmspzz/Rome#50

(0 留言) (0 反應) (0 負責人)Haskell (771 star) (54 fork)batch import

advancedenhancementgood first issuehelp wantedintermediate

描述

Add a command to verify several properties of a framework

Steps which explain the enhancement

A verify command with several switches could be added to:

verify properties contained in the Info.plist of a framework
- verify that a framework is actually at the version it claims to be in the cache
- verify that a framework is built by a specific user
- eventually give the users the possibility to verify any property (maybe come up with a DSL for this)
verify that the she256 hash of a framework matches the sha256 hash in the Carthage Version file for that framework

Current and suggested behavior

No verification is performed at the moment. Verification of some kind, along the lines of the suggestions above can be performed.

Why would the enhancement be useful to most users

Verifying properties of a framework present in the cache give the users move confidence in the cached frameworks.

技術棧: 無
領域: clitoolingrelease
議題類型: feature
難度: 4
預計時間: 3-5 days
活動狀態: stale
清晰度: needs investigation
前置要求: familiarity with Carthagebasic Haskellunderstanding of framework metadata
新手友善度: 20
研究方向: Examine the Rome codebase structure, particularly how existing commands are implemented (e.g., the 'cache' command). Review the Carthage Version file format and Info.plist to understand the properties to verify. Look at any existing tests or patterns for adding new commands. Consider whether a DSL is necessary or if simple flags suffice. Assess the effort for implementing sha256 verification against the Version file.