Security News
JSR Working Group Kicks Off with Ambitious Roadmap and Plans for Open Governance
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.
I started working on GitPython in 2009, back in the days when Python was 'my thing' and I had great plans with it. Of course, back in the days, I didn't really know what I was doing and this shows in many places. Somewhat similar to Python this happens to be 'good enough', but at the same time is deeply flawed and broken beyond repair.
By now, GitPython is widely used and I am sure there is a good reason for that, it's something to be proud of and happy about. The community is maintaining the software and is keeping it relevant for which I am absolutely grateful. For the time to come I am happy to continue maintaining GitPython, remaining hopeful that one day it won't be needed anymore.
More than 15 years after my first meeting with 'git' I am still in excited about it, and am happy to finally have the tools and
probably the skills to scratch that itch of mine: implement git
in a way that makes tool creation a piece of cake for most.
If you like the idea and want to learn more, please head over to gitoxide, an implementation of 'git' in Rust.
(Please note that gitoxide
is not currently available for use in Python, and that Rust is required.)
GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing.
It provides abstractions of git objects for easy access of repository data often backed by calling the git
command-line program.
This project is in maintenance mode, which means that
The project is open to contributions of all kinds, as well as new maintainers.
GitPython needs the git
executable to be installed on the system and available in your
PATH
for most operations. If it is not in your PATH
, you can help GitPython find it
by setting the GIT_PYTHON_GIT_EXECUTABLE=<path/to/git>
environment variable.
The list of dependencies are listed in ./requirements.txt
and ./test-requirements.txt
.
The installer takes care of installing them for you.
GitPython and its required package dependencies can be installed in any of the following ways, all of which should typically be done in a virtual environment.
To obtain and install a copy from PyPI, run:
pip install GitPython
(A distribution package can also be downloaded for manual installation at the PyPI page.)
If you have downloaded the source code, run this from inside the unpacked GitPython
directory:
pip install .
To clone the the GitHub repository from source to work on the code, you can do it like so:
git clone https://github.com/gitpython-developers/GitPython
cd GitPython
./init-tests-after-clone.sh
On Windows, ./init-tests-after-clone.sh
can be run in a Git Bash shell.
If you are cloning your own fork, then replace the above git clone
command with one that gives the URL of your fork. Or use this gh
command (assuming you have gh
and your fork is called GitPython
):
gh repo clone GitPython
Having cloned the repo, create and activate your virtual environment.
Then make an editable install:
pip install -e ".[test]"
In the less common case that you do not want to install test dependencies, pip install -e .
can be used instead.
In rare cases, you may want to work on GitPython and one or both of its gitdb and smmap dependencies at the same time, with changes in your local working copy of gitdb or smmap immediatley reflected in the behavior of your local working copy of GitPython. This can be done by making editable installations of those dependencies in the same virtual environment where you install GitPython.
If you want to do that and you want the versions in GitPython's git submodules to be used, then pass -e git/ext/gitdb
and/or -e git/ext/gitdb/gitdb/ext/smmap
to pip install
. This can be done in any order, and in separate pip install
commands or the same one, so long as -e
appears before each path. For example, you can install GitPython, gitdb, and smmap editably in the currently active virtual environment this way:
pip install -e ".[test]" -e git/ext/gitdb -e git/ext/gitdb/gitdb/ext/smmap
The submodules must have been cloned for that to work, but that will already be the case if you have run ./init-tests-after-clone.sh
. You can use pip list
to check which packages are installed editably and which are installed normally.
To reiterate, this approach should only rarely be used. For most development it is preferable to allow the gitdb and smmap dependencices to be retrieved automatically from PyPI in their latest stable packaged versions.
GitPython is not suited for long-running processes (like daemons) as it tends to
leak system resources. It was written in a time where destructors (as implemented
in the __del__
method) still ran deterministically.
In case you still want to use it in such a context, you will want to search the
codebase for __del__
implementations and call these yourself when you see fit.
Another way assure proper cleanup of resources is to factor out GitPython into a separate process which can be dropped periodically.
See Issue #525.
Important: Right after cloning this repository, please be sure to have executed
the ./init-tests-after-clone.sh
script in the repository root. Otherwise
you will encounter test failures.
Ensure testing libraries are installed. This is taken care of already if you installed with:
pip install -e ".[test]"
If you had installed with a command like pip install -e .
instead, you can still run
the above command to add the testing dependencies.
To test, run:
pytest
To lint, and apply some linting fixes as well as automatic code formatting, run:
pre-commit run --all-files
This includes the linting and autoformatting done by Ruff, as well as some other checks.
To typecheck, run:
mypy
Style and formatting checks, and running tests on all the different supported Python versions, will be performed:
tox
(this skips any Python versions you don't have installed).Specific tools are all configured in the ./pyproject.toml
file:
pytest
(test runner)coverage.py
(code coverage)ruff
(linter and formatter)mypy
(type checker)Orchestration tools:
pre-commit
is in the ./.pre-commit-config.yaml
file.tox
is in ./tox.ini
../.github/workflows/
.Please have a look at the contributions file.
gitpython
tagimport git; git.__version__
)python --version
)VERSION
file.doc/source/changes.rst
changelog file was updated. It should include a link to the forthcoming release page: https://github.com/gitpython-developers/GitPython/releases/tag/<version>
git tag -s <version>
to tag the version in Git.build
and twine
.)make release
.3-Clause BSD License, also known as the New BSD License. See the LICENSE file.
FAQs
GitPython is a Python library used to interact with Git repositories
We found that GitPython demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.
Security News
Research
An advanced npm supply chain attack is leveraging Ethereum smart contracts for decentralized, persistent malware control, evading traditional defenses.
Security News
Research
Attackers are impersonating Sindre Sorhus on npm with a fake 'chalk-node' package containing a malicious backdoor to compromise developers' projects.