Skip to content

pysentry-rs: Add version 0.5.0 - #3063

Draft
luhenry wants to merge 1 commit into
mainfrom
pysentry-rs
Draft

luhenry wants to merge 1 commit into
mainfrom
pysentry-rs

Conversation

@luhenry

@luhenry luhenry commented Oct 13, 2026 •

Copy link
Copy Markdown
Member

Rust core exposed through PyO3/maturin that audits a Python project's dependency tree against the PyPA Advisory Database, PyPI JSON API and OSV.dev. Upstream publishes no riscv64 wheel.

Mirrors upstream's build-python-wheels job, narrowed to riscv64.

Differs from upstream

  • musllinux dropped - rustup.rs ships no riscv64 musl toolchain.
  • Installs the Rust toolchain in before-all - the riscv64 image carries none.

Matrix: cp39/cp310/cp311/cp312/cp313/cp314/cp314t - no abi3 feature on pyo3, so upstream ships one wheel per interpreter; no cp313t since maturin needs 3.14+ for the free-threaded ABI.

Testing

  • upstream's own wheel job runs no test step; adds a network-free import + --help smoke check.

License: OK - MIT, real LICENSE file ships already.

Cargo.lock resolves no closed, git, or arch-gated crates: ring (via reqwest's rustls-tls-native-roots) has no riscv64 assembly and falls through to its portable C path, and simd-adler32 (via zip) gates every SIMD backend on target_arch with a scalar fallback.

Add riscv64 wheel build for pysentry-rs, a Rust/PyO3 (maturin) CLI
tool auditing Python dependency trees against the PyPA Advisory
Database, PyPI JSON API and OSV.dev. Mirrors upstream's own
build-python-wheels job (release.yml), narrowed to riscv64.

Cargo.lock resolves no closed, git, or arch-gated crates: ring
0.17.14 (pulled in via reqwest's rustls-tls-native-roots) has no
riscv64 assembly backend but falls through to its portable C
implementation per its own target.h, and simd-adler32 (via the zip
crate) gates every SIMD backend behind target_arch with a scalar
fallback. No aws-lc-sys, no cmake/perl dependency.
@luhenry
luhenry marked this pull request as draft October 14, 2026 11:34

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant