mpetuska / kamp

Package discovery website and scanner for Kotlin multiplatform.

Hi there 👋

🔭 I’m currently working on

• kmdc
• kamp
• npm-publish

🌱 I’m currently learning

• Android
• Kotlin Native

👯 I’m looking to collaborate on

• Kotlin Multiplatform

🤔 I’m looking for help with

• kmdc
• npm-publish

💬 Ask me about

• Kotlin/JS
• Kotlin/Multiplatform
• Gradle

📫 How to reach me

• Email
• Kotlinlang Slack
• Gradle Community Slack
• dev.to

⚡ Fun fact

• For whatever reason I've graduated in Bsc Economics...

kamp's Issues

GraphQL API

Rebuild server REST API into GraphQL and publish its schema for thid-party consumption.

Allow claiming library ownership

One of the outcomes of this discussion https://kotlinlang.slack.com/archives/C8C4JTXR7/p1669296841581639?thread_ts=1669295970.535429&cid=C8C4JTXR7

It should be possible to log in at least with GitHubv(most repos are hosted there) and ideally kodex should be able to automatically infer which libraries are owned by a given user. It's possible thanks to the SCM URL present in every Maven artifact.

Website Icon Button

Replace library website text link with an icon button for more conciseness

Native CLI redesign

• Remove all JVM dependencies from kamp-cli and build it as a native executable.
• Push current cli capabilities under a scan subcommand.
• Implement a new command to capture and persist ecosystem statistics weekly.

Count the number of usages in open-source projects

One of the metrics on how a given library is "good" (adopted, known, stable - many other detailed features ) is the number of projects that depend on it. E. g. GitHub provides it for npm packages, probably because it's easy to parse this information from package.json. For Maven it's doable as well, but with Gradle it starts to be tricky. Anyway, IMO it's a problem worth tackling.

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update actions/checkout action to v2.7.0
• Update dependency gradle to v8
• Update docker/build-push-action action to v4
• Update docker/login-action action to v2
• Update github/codeql-action action to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

⚠ Dependency Lookup Warnings ⚠

• Renovate failed to look up the following dependencies: Failed to look up docker package oracle/graalvm-ce.

Files affected: app/graalvm-musl.dockerfile

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update actions/cache action to v2.1.8
• Update dependency gradle to v7.6.2
• Update docker/login-action action to v1.14.1
• Update plugin de.fayard.refreshVersions to v0.60.0
• Update actions/cache action to v3
• Update actions/checkout action to v3
• Update actions/download-artifact action to v3
• Update actions/setup-java action to v3
• Update actions/upload-artifact action to v3
• Update benjlevesque/short-sha action to v2
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

scanner/docker-compose.yml

dockerfile

app/Dockerfile

• gcr.io/distroless/java 11

app/graalvm-musl.dockerfile

• oracle/graalvm-ce 20.3.0-java11
• oracle/graalvm-ce 20.3.0-java11

scanner/Dockerfile

• gcr.io/distroless/java 11

scanner/db.dockerfile

github-actions

.github/workflows/detekt-analysis.yml

• actions/checkout v2
• github/codeql-action v1

.github/workflows/pr.yml

• actions/checkout v2.6.0
• actions/cache v2.1.7
• actions/setup-java v2
• actions/upload-artifact v2
• actions/download-artifact v2
• DamianReeves/write-file-action v1.2
• Azure/static-web-apps-deploy v0.0.1-preview
• Azure/static-web-apps-deploy v0.0.1-preview

.github/workflows/release-kodex.yml

• actions/checkout v2.6.0
• actions/cache v2.1.7
• actions/setup-java v2
• docker/build-push-action v5

.github/workflows/release.yml

• actions/checkout v2.6.0
• actions/cache v2.1.7
• actions/setup-java v2
• actions/upload-artifact v2
• docker/build-push-action v1
• docker/build-push-action v1
• actions/checkout v2.6.0
• little-core-labs/install-terraform v2.0.0
• benjlevesque/short-sha v1.2
• actions/download-artifact v2
• DamianReeves/write-file-action v1.2
• Azure/static-web-apps-deploy v0.0.1-preview

.github/workflows/scan-kodex.yml

• docker/login-action v2
• docker/login-action v2

.github/workflows/scan.yml

• docker/login-action v1.10.0

.github/workflows/tf-refresh.yml

• actions/checkout v2.6.0
• little-core-labs/install-terraform v2.0.0
• benjlevesque/short-sha v1.2

gradle

buildSrc/src/main/kotlin/util.kt

gradle.properties

settings.gradle.kts

• de.fayard.refreshVersions 0.40.1

build.gradle.kts

app/build.gradle.kts

buildSrc/settings.gradle.kts

• de.fayard.refreshVersions 0.40.1

buildSrc/build.gradle.kts

common/build.gradle.kts

scanner/build.gradle.kts

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 7.1

terraform

infra/main.tf

---

• Check this box to trigger a request for Renovate to run again on this repository

Git repository metadata parsing

Implement pluggable integration point in the scanner to capture additional data rom GitHub and GitLab repositories where relevant.

Library star rating

Extend library cards with autofetched github or gitlab star count information

Compose Frontend

Reimplement current web-ui with compose-multiplatform as a MPP client. This should open the doors for easy implementation of non-web clients in the future.

Missing android libraries

My library Zoomable and Google's Accompanist are missing from the index.

SCM Icon Buttons

Replace SCM text link with icon button representing github, gitlab or a generic git repository.

Allow reporting a project as needing help

One of the outcomes of this discussion https://kotlinlang.slack.com/archives/C8C4JTXR7/p1669296841581639?thread_ts=1669295970.535429&cid=C8C4JTXR7

The discussion started with an idea to help projects that have maintenance issues get some help. Kodex could provide a way to mark a given project this way, to attract sponsors or contributors.

Scanner misses nested packages

If a group has a package and a subgroup at the same level, subgroup will be missed by the scanner. For example, due to clikt packages moving group recently, new subgrouped package is missed by the scanner. https://repo1.maven.org/maven2/com/github/ajalt/