Add a consistency check that compares release artifact files & version number and files at a release commit
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 210
- Forks
- 36
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 2
Description
For context, please refer to issue https://github.com/getmoto/moto/issues/7908
I used Macaron v0.11.0 to analyze the Moto package v5.0.11 and noticed that Macaron doesn’t alert me to the version inconsistency reported in the above issue. The JSON report is here: moto.json
It’d be useful if Macaron had a check that would alert me if the published artifact files are different than the files checked into the repository at the release commit. In this particular case of Moto, I suspect the difference might be only in the declared version, but other packages might sneak other changes into the published artifact…
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Read issue #7908 and the linked moto.json report first. Define the check to compare published artifact files with the files at the release commit, including version differences, and report any mismatch.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- build-system, release, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100