litani

Install command: 
brew install litani

Metabuild system

https://awslabs.github.io/aws-build-accumulator/

License: Apache-2.0

Development: Pull requests

Formula JSON API: /api/formula/litani.json

Formula code: litani.rb on GitHub

Bottle (binary package) installation support provided for:

macOS on
Apple Silicon		 golden gate ✅
tahoe ✅
sequoia ✅
Linux ARM64 ✅
x86_64 ✅

Current versions:

stable ✅ 1.29.0

Depends on:

gnuplot 6.0.5 Command-driven, interactive function plotting
graphviz 16.1.0 Graph visualization software from AT&T and Bell Labs
libyaml 0.2.5 YAML Parser
ninja 1.13.2 Small build system for use with gyp or CMake
python@3.15 3.15.0 Interpreted, interactive, object-oriented programming language

Depends on when building from source:

coreutils 9.12 GNU File, Shell, and Text utilities
mandoc 1.14.6 UNIX manpage compiler toolset

Binaries: litani

Known vulnerabilities in the current version:

GHSA-h5c8-rqwp-cp95 (medium) Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
GHSA-h75v-3vvj-5mfj (medium) Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
GHSA-gmj6-6f8f-6699 (high) Jinja has a sandbox breakout through malicious filenames
GHSA-q2x7-8rv6-6q7h (high) Jinja has a sandbox breakout through indirect reference to format method
GHSA-cpwx-vrp4-4pq7 Jinja2 vulnerable to sandbox breakout through attr filter selecting format method

Data from Homebrew/advisory-database. Run brew vulns litani for a live check.

Analytics:

30 days90 days365 days
Installs929199
Installs on Request929199
Build Errors0