mapbox / mapbox/mapbox-vision-ios

Script for checking undesirable dependencies in resolved file

Open
#133 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

iOS nostale P1
Dominant language
Swift
Stars
63
Forks
26
PR merge metrics
No merged PRs in 30d

Description

### Summary
Carthage.resolved could contain dependencies which were used to build project by carthage.
We can write a script which will check such kind of dependencies and run it in CI.

List of projects:
- `vision-ios-examples`;
- `mapbox-vision-ios/Examples`;
- `mapbox-vision-devtools/Platforms/iOS/DataRecorder`.

List of undesirable dependencies in resolved:
- `github "mapbox/mapbox-vision-ios"` – presence of this dependency in resolved breaks bootstrap script;
- `binary "https://api.mapbox.com/downloads/v1/vision/ios/mapbox-vision-native-all.carthage?access_token="` – potential leak of private token.

### Steps
- [ ] Implement script;
- [ ] Add script to CI:
- [ ] `mapbox-vision-ios`;
- [ ] `vision-ios-examples`;
- [ ] `mapbox-vision-devtools`.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by inspecting Carthage.resolved and the existing bootstrap and CI setup for mapbox-vision-ios. Use the listed projects and undesirable dependencies as the scope; done means a script detects those entries and runs in mapbox-vision-ios, vision-ios-examples, and mapbox-vision-devtools CI.

Written by the indexing model from the issue text.

Assessment

Tech stack
swift
Domain
build-system, ci-cd
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.