ContinuumIO/package_verifier

Name: package_verifier

Owner: Continuum Analytics, Inc.

Description: Tools for verifying the functionality and integrity of conda packages

Created: 2016-03-16 20:21:19.0

Updated: 2017-12-20 03:27:39.0

Pushed: 2016-03-16 20:26:40.0

Homepage: null

Size: 2

Language: null

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

package_verifier

Tools for verifying the functionality and integrity of conda packages

This project aims to develop tools that verify Conda packages from an arbitrary source against a reference recipe. Such verification may include:

• Running package test suites
• Running downstream test suites to some arbitrary level
• Perform source and binary matching, to ensure that the package has not been tampered with

Another term for this is “reproducible builds.” This effort is essential for establishing trust in community packages if they are going to be sourced as the content of Anaconda.

Early investigations have pointed at https://diffoscope.org/, which appears to be primarily a Linux tool right now.