search

sonatype-nexus-community / DevAudit

Open-source, cross-platform, multi-purpose security auditing tool
BSD 3-Clause "New" or "Revised" License
360 stars 74 forks source link

Chocolatey package not up to date #119

Closed OSSIndex-Admin closed 4 years ago

OSSIndex-Admin commented 5 years ago

The Chocolatey package is way out of date. When trying to update it, I got the following errors that must be corrected before we can update it:

DevAudit.CLI has failed automated validation. Requirements

Requirements represent the minimum quality of a package that is acceptable. When a package version has failed requirements, the package version requires fixing and/or response by the maintainer. Provided a Requirement has flagged correctly, it must be fixed before the package version can be approved. The exact same version should be uploaded during moderation review.

Binary files (.exe, .msi, .zip, etc) have been included without including a LICENSE.txt file. This file is required when including binaries More...
Binary files (.exe, .msi, .zip) have been included without including a VERIFICATION.txt file. This file is required when including binaries More...
bchurchill commented 5 years ago

I appreciate the work being done on this -- any idea when it might be done?

ken-duck commented 5 years ago

Hi!

We have been properly implementing an automated build for the Chocolatey package. I suspect that I will be able to try to upload the new package before the end of the week. If there are any problems with our new package it may take a few days to iron out. We will keep you up to date.

ken-duck commented 4 years ago

Catching up with things. A new version has been available for rather some time; latest build was from January, though I am sure we had it working before that. Sorry for the delay in notification.

We have recently been going through some organizational changes in OSS Index which will hopefully help us keep up with resolving and responding to issues in a more appropriate timeframe.

ken-duck commented 4 years ago

Omigod. That version is old, but was only recently approved. I'm pushing a new one hopefully today.

ken-duck commented 4 years ago

New version uploaded, pending verification...

ken-duck commented 4 years ago

Sigh. Rejected due to a few minor problems. I am tagging @allisterb to look at them.

ken-duck commented 4 years ago

At long last. Updated, and now that we have the generation automated it will be easier to keep up to date.