phar-io / phar.io Goto Github PK
View Code? Open in Web Editor NEWWebsite of the phar.io project
Home Page: https://phar.io
Website of the phar.io project
Home Page: https://phar.io
The following URL return is not found.
Those are used for XML schema
https://phar.io/repository-list
https://phar.io/phive/installdb
We need to install a copy of PHIVE because it is not natively available to GitHub Actions (see actions/runner-images#199).
We need to be able to run PHIVE to switch to a different version of, say, PHPUnit, to be able to run tests against all versions of PHP (from 7.1 through 8.0).
It would seem logical to add PHIVE itself to the phive.xml
file, but it seems this is not possible, so we must manually download the .phar
and dump it in some tools directory. We will later find we have an obsolete version and need to manually update it.
All tools contained in https://phar.phpunit.de/phive.xml should be added to repositories.xml so they can be installed with phive.
... appears to be a cert issue? See originating discussion: shivammathur/setup-php#540
Link in question: https://phar.io/releases/phive.phar
Preferred alias; masquerade
I like Phive, its really easy to use and keeps things neat...but it isn't easy to find out what packages are available for use with Phive.
Sure there is the list on the homepage: https://phar.io/
But this is incomplete, as it states, "many more". I think from a user onboarding standpoint it would be useful to have another button next to "Yours missing?" that says something like, "View Available Packages" or "View Package Repository" that would provide a full list of the available packages.
After searching a bit I stumbled across this listing, which I'm guessing is the complete list?
https://github.com/phar-io/phar.io/blob/master/data/repositories.xml
I think a tool like Phive can make the onboarding of new PHP developers much simpler but that right now the lack of a package listing hampers this, fwiw.
Thanks for your hard work!
Build a tool that parses existing PHARs and creates a Phive XML repository file.
Example tool: https://github.com/FriendsOfPHP/PHP-CS-Fixer/
Right now, Phive/phar.io is only reason why we are uploading phar files to GitHub releases:
https://github.com/FriendsOfPHP/PHP-CS-Fixer/releases/tag/v3.9.3
(files: php-cs-fixer.phar, php-cs-fixer.phar.asc)
I wonder if we could have if possible to have an option to read phar files also from dedicated shim releases? like
https://github.com/PHP-CS-Fixer/shim/tree/v3.9.3
(files: php-cs-fixer, php-cs-fixer.asc)
You might consider adding an alias for paratest as well and listing it on your website - starting now (version 2.1) we also have an automatic .phar deployment in place: https://github.com/paratestphp/paratest
This page: https://phar.io/howto/uploading-public-keys.html has a broken link to submit your public key to keyservers: https://sks-keyservers.net/i/#submit
The root page is up, but there's no obvious navigation to lead to the correct form now.
PHPStorm has built-in support for PHP Mess Detector, it would be interesting to have it available in Phive. https://phpmd.org/
Repo: https://github.com/deployphp/deployer
Let me know how i can assist
Only version 2.7 available can you update it to 2.8.2
https://phpmd.org/
Explain how the rate limit works and how an auth token can be provided.
https://github.com/bobthecow/psysh/ doesn't provide their phar
releases directly on GitHub, so I can't use phive install bobthecow/psysh
to install them.
The latest release is available from https://psysh.org/psysh, however (see https://github.com/bobthecow/psysh/wiki/Installation).
But, phive install https://psysh.org/psysh
results in the error "Could not extract PHAR version from https://psysh.org/psysh".
It would be great if it was supported directly with phive install psysh
.
Afaik we do have currently two options to enable funding for PHP OSS.
On the one hand, there is the funding
section for composer https://getcomposer.org/doc/04-schema.md#funding
On the other, there is GitHub sponsoring.
If one is installing a dependency using composer, a prompt will get shown that some packages have a funding.
Sadly with phive
this is not possible.
So this is small discussion if we should add funding information to phive as well.
For example we could edit the repositories.xml
accordingly:
<phar alias="composer-unused" composer="composer-unused/composer-unused">
<repository type="github" url="https://api.github.com/repos/composer-unused/composer-unused/releases" />
<funding type="GittHub" url="https://github.com/sponsors/icanhazstring"/>
<funding type="Paypal" url="https://paypal.me/icanhazstring"/>
</phar>
If we run phive install ...
we could display information about the available funding
for the installed tool.
$ phive install composer-unused --copy
Phive 0.14.4 - Copyright (C) 2015-2020 by Arne Blankerts, Sebastian Heuer and Contributors
Fetching repository list
Downloading https://phar.io/data/repositories.xml
Downloading https://github.com/composer-unused/composer-unused/releases/download/0.7.5/composer-unused.phar
Downloading https://github.com/composer-unused/composer-unused/releases/download/0.7.5/composer-unused.phar.asc
Copying composer-unused-0.7.5.phar to /Users/andreas.froemer/test/tools/composer-unused
There is funding available:
Github: https://github.com/sponsors/icanhazstring
Paypal: https://paypal.me/icanhazstring
We use twigcs on our CI and it would be useful to be able to install it with phive.
They provide PHAR files but no signature: https://github.com/friendsoftwig/twigcs/releases
maybe skip global installation for now, since we do not know if this feature will actually be kept like it is today.
Hi, i am new to phive so still a lot of unexplored land for me. Wanted to see if it's something i can contribute for https://github.com/sensiolabs/security-checker repo to allow phive to install it. Below you can see the command output and also link to where releases should be listed.
root@project:/vagrant# phive install sensiolabs/security-checker
Phive 0.14.4 - Copyright (C) 2015-2020 by Arne Blankerts, Sebastian Heuer and Contributors
Downloading https://api.github.com/rate_limit
[ERROR] No matching release found!
https://api.github.com/repos/sensiolabs/security-checker/releases
From @m8rge on July 16, 2016 12:35
This tool need in page like
https://getcomposer.org/doc/articles/versions.md
Copied from original issue: phar-io/phive#68
Consider adding drupal-check, built on PHPStan, this static analysis tool will check for correctness (e.g. using a class that doesn't exist), deprecation errors, and more.
When executing the instruction from the website:
wget -O phive.phar "https://phar.io/releases/phive.phar"
wget -O phive.phar.asc "https://phar.io/releases/phive.phar.asc"
gpg --keyserver hkps://keys.openpgp.org --recv-keys 0x6AF725270AB81E04D79442549D8A98B29B2D5D79
gpg --verify phive.phar.asc phive.phar
I am currently getting a warning:
2022-11-30 20:59:48 (50.9 MB/s) - ‘phive.phar.asc’ saved [854/854]
gpg: key 9D8A98B29B2D5D79: "phar.io <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
gpg: Signature made Tue 2 Aug 09:40:05 2022 CEST
gpg: using RSA key 6AF725270AB81E04D79442549D8A98B29B2D5D79
gpg: issuer "[email protected]"
gpg: Good signature from "phar.io <[email protected]>" [unknown]
gpg: aka "[jpeg image of size 4811]" [unknown]
gpg: WARNING: The key's User ID is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 6AF7 2527 0AB8 1E04 D794 4254 9D8A 98B2 9B2D 5D79
See "WARNING: The key's User ID is not certified with a trusted signature!".
Is this expected?
Is it possible to use phar from my build server. As I already configured CI/CD for it.
Currently the website shows a few tools and states that "many more" are supported, but there are no instructions on the website on how to find the complete list of tools.
The easiest solution would be to link to https://github.com/phar-io/phar.io/blob/master/data/repositories.xml on the website.
Right now, running phive install drush-ops/drush
doesn't give me a .phar file.
I explained why and how I created and tested the .phar file for Drush 10.1.1 here: drush-ops/drush#3331 (comment)
The release redirect is powered by a small PHP script which connects to the Github API to find the latest release and redirect to the appropriate asset.
Performing such an API call to github.com upon every request is a hack, particularly since the current release information doesn't change very often.
The links to the asset files associated with a release are static.
So instead of calling the API, we should create the redirects statically upon release.
for the extra paranoid Users
Hello,
Consider adding support for zephir.phar.
Zephir - is a high level programming language that eases the creation and maintainability of extensions for PHP. Zephir extensions are exported to C code that can be compiled and optimized by major C compilers such as gcc/clang/vc++. Functionality is exposed to the PHP language.
I think it's time we add an option to the website to "claim" an alias and provide the information needed.
We could automate it, so that the form submit performs the checks (e.g. the URL, the alias and whatever else we require), apply the changes to the repositories.xml and automagically open a PR for that.
Hi, I'm trying to install phpmd using PHIVE, but am running into the following error:
./Bin/phive install phpmd --target Bin --copy --force-accept-unsigned
Phive 0.14.5 - Copyright (C) 2015-2021 by Arne Blankerts, Sebastian Heuer and Contributors
Downloading https://api.github.com/rate_limit
Downloading https://github.com/phpmd/phpmd/releases/download/2.9.1/phpmd.phar
Downloading https://github.com/phpmd/phpmd/releases/download/2.9.1/phpmd.phar.asc
sh: line 1: 5779 Abort trap: 6 '/Users/xxxxx/Developer/yyyyy/Bin/gpg' --homedir '/Users/xxxxx/.phive/gpg' --quiet --status-fd 1 --lock-multiple --no-permission-warning --no-greeting --exit-on-status-write-error --batch --no-tty --with-colons --verify '/var/folders/j0/3wvd954n18ldwg2xbhmggswm0000gn/T/phive_gpg_6063e812136511.26513987' '/var/folders/j0/3wvd954n18ldwg2xbhmggswm0000gn/T/phive_gpg_6063e81212a589.86813106' 2> /dev/null
[ERROR] GnuPG verify call returned false
I'm not quite sure how to address this error, as other packages seem to install fine. Thanks for your help!
Hi,
I just found out your website and I would like to add Doctum to it because I provide a PHAR.
Thanks :)
Consider adding support for ocular.phar (used by scrutinizer) and php-coveralls.phar.
ocular -- https://github.com/scrutinizer-ci/ocular
coveralls -- https://github.com/php-coveralls/php-coveralls
The way I understand the phive install phpdox bin/phpdox
example on the phar.io website is that this syntax installs the tool identified by phpdox
to bin/phpdox
.
Per phar-io/phive#43 (comment) this "example is wrong" and the functionality is not yet implemented.
This ticket is intended to remove the wrong example from the phar.io website.
Is it possible to have multiple repository URL for one PHAR in repositories.xml
. This would be useful if one URL will be unavailable, so PHIVE could fallback to another.
Example:
<?xml version="1.0" encoding="UTF-8"?>
<repositories xmlns="https://phar.io/repository-list">
<phar alias="phpunit" composer="phpunit/phpunit">
<repository url="https://phar.phpunit.de/phive.xml"/>
<repository type="github" url="https://api.github.com/repos/sebastianbergmann/phpunit/releases" />
</phar>
</repositories>
Also, is it possible to host PHAR on other GIT systems, like GitLab or BitBucket?
Implement a listener for GitHub's release events to automatically update a Phive repository.
I have a development environment based on Visual Studio Code 1.68.1 and WampServer 3.2.7. I need to install phpDocumentor to document my PHP code containing phpDoc blocks.
I installed composer in Windows 10 Pro but it is not recommended to install phpDocumentor. A good alternative would be phive, but I cannot find a way to install phive on Windows 10.
Furthermore WampServer allows to switch among different PHP versions, so I need to know how to use phpDocumentor for all of them.
Any help appreciated.
Shouldn't composer be in the list as well?
There's some other ones off the top of my head:
Actually there's a whole bunch on this "awesome list":
https://github.com/algo13/awesome-php-static-analysis
When I use wget -O phive.phar https://phar.io/releases/phive.phar
I receive version 0.13.2
, while the newer Phive version at GitHub is 0.14.*
.
We're getting some errors with our tool installations with the 0.13.2
. version, and the problem is fixed in some later version, but we would not like to hard code a version to fix this.
Thanks!
footer copyright
The at phar.io releases page returns 404. Which breaks our ci currently:
https://phar.io/releases/phive.phar.asc
I checked the script but that seems to be ok to me. Maybe some misconfiguration?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.