phar-io/phar.io

Website of the phar.io project

phar.io's Issues

URL for schema return NOT FOUND

The following URL return is not found.
Those are used for XML schema

https://phar.io/repository-list
https://phar.io/phive/installdb

Rendering bug related to logo on phar.io website

I am using Firefox 44.0.2 on Fedora 23.

PHIVE not supported by PHIVE

We need to install a copy of PHIVE because it is not natively available to GitHub Actions (see actions/runner-images#199).

We need to be able to run PHIVE to switch to a different version of, say, PHPUnit, to be able to run tests against all versions of PHP (from 7.1 through 8.0).

It would seem logical to add PHIVE itself to the phive.xml file, but it seems this is not possible, so we must manually download the .phar and dump it in some tools directory. We will later find we have an obsolete version and need to manually update it.

Add aliases for all relevant tools hosted on phar.phpunit.de to repositories.xml

All tools contained in https://phar.phpunit.de/phive.xml should be added to repositories.xml so they can be installed with phive.

Releases Link Not Working

... appears to be a cert issue? See originating discussion: shivammathur/setup-php#540

Link in question: https://phar.io/releases/phive.phar

Add elgentos/masquerade to Phar.io

Preferred alias; masquerade

https://github.com/elgentos/masquerade

Provide List of Available Packages (in full)

I like Phive, its really easy to use and keeps things neat...but it isn't easy to find out what packages are available for use with Phive.

Sure there is the list on the homepage: https://phar.io/

But this is incomplete, as it states, "many more". I think from a user onboarding standpoint it would be useful to have another button next to "Yours missing?" that says something like, "View Available Packages" or "View Package Repository" that would provide a full list of the available packages.

After searching a bit I stumbled across this listing, which I'm guessing is the complete list?
https://github.com/phar-io/phar.io/blob/master/data/repositories.xml

I think a tool like Phive can make the onboarding of new PHP developers much simpler but that right now the lack of a package listing hampers this, fwiw.

Thanks for your hard work!

Build Phive Repository from existing PHARs

Build a tool that parses existing PHARs and creates a Phive XML repository file.

Feature idea: repositories.xml - support not only GH releases, but also shim packages

Example tool: https://github.com/FriendsOfPHP/PHP-CS-Fixer/

Right now, Phive/phar.io is only reason why we are uploading phar files to GitHub releases:
https://github.com/FriendsOfPHP/PHP-CS-Fixer/releases/tag/v3.9.3
(files: php-cs-fixer.phar, php-cs-fixer.phar.asc)

I wonder if we could have if possible to have an option to read phar files also from dedicated shim releases? like
https://github.com/PHP-CS-Fixer/shim/tree/v3.9.3
(files: php-cs-fixer, php-cs-fixer.asc)

Paratest also now available as Phar

You might consider adding an alias for paratest as well and listing it on your website - starting now (version 2.1) we also have an automatic .phar deployment in place: https://github.com/paratestphp/paratest

broken link 404 to Submit your public key to the key servers

This page: https://phar.io/howto/uploading-public-keys.html has a broken link to submit your public key to keyservers: https://sks-keyservers.net/i/#submit

The root page is up, but there's no obvious navigation to lead to the correct form now.

PHP Mess Detector

PHPStorm has built-in support for PHP Mess Detector, it would be interesting to have it available in Phive. https://phpmd.org/

Deployer support

Repo: https://github.com/deployphp/deployer

Let me know how i can assist

Update the version of PHPMD

Only version 2.7 available can you update it to 2.8.2
https://phpmd.org/

add documentation for installing phive with homebrew

add documentation on GitHub Rate Limit

Explain how the rate limit works and how an auth token can be provided.

add guide for making a release on GitHub PHIVE-compatible

Add support for psy/psysh

https://github.com/bobthecow/psysh/ doesn't provide their phar releases directly on GitHub, so I can't use phive install bobthecow/psysh to install them.

The latest release is available from https://psysh.org/psysh, however (see https://github.com/bobthecow/psysh/wiki/Installation).

But, phive install https://psysh.org/psysh results in the error "Could not extract PHAR version from https://psysh.org/psysh".

It would be great if it was supported directly with phive install psysh.

Feature Idea: Funding

Afaik we do have currently two options to enable funding for PHP OSS.

On the one hand, there is the funding section for composer https://getcomposer.org/doc/04-schema.md#funding
On the other, there is GitHub sponsoring.

If one is installing a dependency using composer, a prompt will get shown that some packages have a funding.
Sadly with phive this is not possible.

So this is small discussion if we should add funding information to phive as well.

For example we could edit the repositories.xml accordingly:

<phar alias="composer-unused" composer="composer-unused/composer-unused">
    <repository type="github" url="https://api.github.com/repos/composer-unused/composer-unused/releases" />
    <funding type="GittHub" url="https://github.com/sponsors/icanhazstring"/>
    <funding type="Paypal" url="https://paypal.me/icanhazstring"/>
 </phar>

If we run phive install ... we could display information about the available funding for the installed tool.

$ phive install composer-unused --copy
Phive 0.14.4 - Copyright (C) 2015-2020 by Arne Blankerts, Sebastian Heuer and Contributors
Fetching repository list
Downloading https://phar.io/data/repositories.xml
Downloading https://github.com/composer-unused/composer-unused/releases/download/0.7.5/composer-unused.phar
Downloading https://github.com/composer-unused/composer-unused/releases/download/0.7.5/composer-unused.phar.asc
Copying composer-unused-0.7.5.phar to /Users/andreas.froemer/test/tools/composer-unused

There is funding available:
Github: https://github.com/sponsors/icanhazstring
Paypal: https://paypal.me/icanhazstring

content goes outside the block on mobile

Add support for twigcs

We use twigcs on our CI and it would be useful to be able to install it with phive.

They provide PHAR files but no signature: https://github.com/friendsoftwig/twigcs/releases

Add phpspec?

add documentation for phive install

• how does Phive install PHARs?
• which sources are supported (GitHub, Phar.io repo, URL)
• where are they stored?
• explain phive.xml

maybe skip global installation for now, since we do not know if this feature will actually be kept like it is today.

No matching release found for sensiolabs/security-checker

Hi, i am new to phive so still a lot of unexplored land for me. Wanted to see if it's something i can contribute for https://github.com/sensiolabs/security-checker repo to allow phive to install it. Below you can see the command output and also link to where releases should be listed.

root@project:/vagrant# phive install sensiolabs/security-checker
Phive 0.14.4 - Copyright (C) 2015-2020 by Arne Blankerts, Sebastian Heuer and Contributors
Downloading https://api.github.com/rate_limit
[ERROR]    No matching release found! 

https://api.github.com/repos/sensiolabs/security-checker/releases

Goal

• Allow for repo https://github.com/sensiolabs/security-checker to be installed via phive

add favicons (feature)

https://realfavicongenerator.net/favicon_checker?protocol=https&site=phar.io%2F#.YglUn9_P23A

remove unnecessary file

https://github.com/phar-io/phar.io/blob/master/html/images/.DS_Store

document version describe syntax

From @m8rge on July 16, 2016 12:35

This tool need in page like
https://getcomposer.org/doc/articles/versions.md

Copied from original issue: phar-io/phive#68

Consider adding drupal-check

Consider adding drupal-check, built on PHPStan, this static analysis tool will check for correctness (e.g. using a class that doesn't exist), deprecation errors, and more.

https://github.com/mglaman/drupal-check

Failing to verify the PHAR

When executing the instruction from the website:

wget -O phive.phar "https://phar.io/releases/phive.phar"
wget -O phive.phar.asc "https://phar.io/releases/phive.phar.asc"
gpg --keyserver hkps://keys.openpgp.org --recv-keys 0x6AF725270AB81E04D79442549D8A98B29B2D5D79
gpg --verify phive.phar.asc phive.phar

I am currently getting a warning:

2022-11-30 20:59:48 (50.9 MB/s) - ‘phive.phar.asc’ saved [854/854]

gpg: key 9D8A98B29B2D5D79: "phar.io <[email protected]>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: Signature made Tue  2 Aug 09:40:05 2022 CEST
gpg:                using RSA key 6AF725270AB81E04D79442549D8A98B29B2D5D79
gpg:                issuer "[email protected]"
gpg: Good signature from "phar.io <[email protected]>" [unknown]
gpg:                 aka "[jpeg image of size 4811]" [unknown]
gpg: WARNING: The key's User ID is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 6AF7 2527 0AB8 1E04 D794  4254 9D8A 98B2 9B2D 5D79

See "WARNING: The key's User ID is not certified with a trusted signature!".

Is this expected?

So what do I need to add Deployer?

Is it possible to use phar from my build server. As I already configured CI/CD for it.

Show full list of supported tools on website

Currently the website shows a few tools and states that "many more" are supported, but there are no instructions on the website on how to find the complete list of tools.

The easiest solution would be to link to https://github.com/phar-io/phar.io/blob/master/data/repositories.xml on the website.

Please add Drush

Right now, running phive install drush-ops/drush doesn't give me a .phar file.

I explained why and how I created and tested the .phar file for Drush 10.1.1 here: drush-ops/drush#3331 (comment)

Replace `release.php` with a set of static links updated upon release

The release redirect is powered by a small PHP script which connects to the Github API to find the latest release and redirect to the appropriate asset.

Performing such an API call to github.com upon every request is a hack, particularly since the current release information doesn't change very often.

The links to the asset files associated with a release are static.
So instead of calling the API, we should create the redirects statically upon release.

sign the used key by team members and show/link how to validate the trust path

for the extra paranoid Users

Consider adding Zephir

Hello,

Consider adding support for zephir.phar.

Zephir - is a high level programming language that eases the creation and maintainability of extensions for PHP. Zephir extensions are exported to C code that can be compiled and optimized by major C compilers such as gcc/clang/vc++. Functionality is exposed to the PHP language.

• Website
• GitHub
• Releases has attached PHAR

Add behat?

Website for alias registration

I think it's time we add an option to the website to "claim" an alias and provide the information needed.

We could automate it, so that the form submit performs the checks (e.g. the URL, the alias and whatever else we require), apply the changes to the repositories.xml and automagically open a PR for that.

Trying to install `phpmd`

Hi, I'm trying to install phpmd using PHIVE, but am running into the following error:

./Bin/phive install phpmd --target Bin --copy --force-accept-unsigned
Phive 0.14.5 - Copyright (C) 2015-2021 by Arne Blankerts, Sebastian Heuer and Contributors
Downloading https://api.github.com/rate_limit
Downloading https://github.com/phpmd/phpmd/releases/download/2.9.1/phpmd.phar
Downloading https://github.com/phpmd/phpmd/releases/download/2.9.1/phpmd.phar.asc
sh: line 1:  5779 Abort trap: 6           '/Users/xxxxx/Developer/yyyyy/Bin/gpg' --homedir '/Users/xxxxx/.phive/gpg' --quiet --status-fd 1 --lock-multiple --no-permission-warning --no-greeting --exit-on-status-write-error --batch --no-tty --with-colons --verify '/var/folders/j0/3wvd954n18ldwg2xbhmggswm0000gn/T/phive_gpg_6063e812136511.26513987' '/var/folders/j0/3wvd954n18ldwg2xbhmggswm0000gn/T/phive_gpg_6063e81212a589.86813106' 2> /dev/null
[ERROR]    GnuPG verify call returned false

I'm not quite sure how to address this error, as other packages seem to install fine. Thanks for your help!

Add Doctum to the main webpage ?

Hi,

I just found out your website and I would like to add Doctum to it because I provide a PHAR.

Thanks :)

Consider adding ocular and coveralls

Consider adding support for ocular.phar (used by scrutinizer) and php-coveralls.phar.

ocular -- https://github.com/scrutinizer-ci/ocular
coveralls -- https://github.com/php-coveralls/php-coveralls

Wrong example "phive install phpdox bin/phpdox"

The way I understand the phive install phpdox bin/phpdox example on the phar.io website is that this syntax installs the tool identified by phpdox to bin/phpdox.

Per phar-io/phive#43 (comment) this "example is wrong" and the functionality is not yet implemented.

This ticket is intended to remove the wrong example from the phar.io website.

Multiple repositories for one PHAR

Is it possible to have multiple repository URL for one PHAR in repositories.xml. This would be useful if one URL will be unavailable, so PHIVE could fallback to another.

Example:

<?xml version="1.0" encoding="UTF-8"?>
<repositories xmlns="https://phar.io/repository-list">
    <phar alias="phpunit" composer="phpunit/phpunit">
        <repository url="https://phar.phpunit.de/phive.xml"/>
        <repository type="github" url="https://api.github.com/repos/sebastianbergmann/phpunit/releases" />
    </phar>
</repositories>

Also, is it possible to host PHAR on other GIT systems, like GitLab or BitBucket?

Automatically update phar repository via webhook

Implement a listener for GitHub's release events to automatically update a Phive repository.

Installing PHIVE on Windows 10

I have a development environment based on Visual Studio Code 1.68.1 and WampServer 3.2.7. I need to install phpDocumentor to document my PHP code containing phpDoc blocks.
I installed composer in Windows 10 Pro but it is not recommended to install phpDocumentor. A good alternative would be phive, but I cannot find a way to install phive on Windows 10.
Furthermore WampServer allows to switch among different PHP versions, so I need to know how to use phpDocumentor for all of them.

Any help appreciated.

Add composer itself? Plus a few phars I know and are not on the list

Shouldn't composer be in the list as well?

There's some other ones off the top of my head:

• phpcs
• phpmd
• phpspec
• php7cc

Actually there's a whole bunch on this "awesome list":
https://github.com/algo13/awesome-php-static-analysis

Release linked to not latest release

When I use wget -O phive.phar https://phar.io/releases/phive.phar I receive version 0.13.2, while the newer Phive version at GitHub is 0.14.*.

We're getting some errors with our tool installations with the 0.13.2. version, and the problem is fixed in some later version, but we would not like to hard code a version to fix this.

Thanks!

update year

footer copyright

Release redirect broken

The at phar.io releases page returns 404. Which breaks our ci currently:

https://phar.io/releases/phive.phar.asc
I checked the script but that seems to be ok to me. Maybe some misconfiguration?

https://phar.io SSL cert expired.

Add known projects

• https://github.com/iMi-digital/imi-conrun
• https://github.com/imi-digital/irobo