
Security News
Astral Launches pyx: A Python-Native Package Registry
Astral unveils pyx, a Python-native package registry in beta, designed to speed installs, enhance security, and integrate deeply with uv.
A Ruby library for creating, editing and validating UCF files.
This is a Ruby library for working with UCF documents. See the specification for more details. UCF is a type of EPUB and very similar to the EPUB Open Container Format (OCF).
Most of this library's API is provided by the underlying zip-container gem so you will need to consult that documentation as well in addition to this.
There are some examples of how to use the library provided in the examples directory. See the contents of the tests directory for even more.
This library has two entry points.
The main UCF::File
class is a specialization of ZipContainer::File which largely mimics the rubyzip Zip::File and Zip::FileSystem APIs.
The UCF::Dir
class is a based upon the ZipContainer::Dir class which mimics, where possible, the core ruby Dir API.
There are some examples of how to use the library provided in the examples directory. See the contents of the tests directory for even more.
The UCF specification requires that files in the META-INF directory are validated against a schema if they are present. If the nokogiri gem is available then this library will use it to validate the contents of the container.xml
and manifest.xml
files. This functionality is not enforced on the user in case they are not using the META-INF directory and so would not need the extra dependency on nokogiri.
When used on its own the UCF library requires Ruby version >=3.0, however, if you are using nokogiri for schema validation then you need to use Ruby version >=3.1 to satisfy its version constraints.
The basic requirements of a UCF document are all implemented but there are a number of optional features that are not yet provided.
container.xml
and manifest.xml
files are validated but others are not yet.From version 1.0.0 onwards, the principles of semantic versioning are applied when numbering releases with new features or breaking changes.
Please see our Code of Conduct and our contributor guidelines.
BSD (See LICENCE file or http://www.opensource.org/licenses/bsd-license.php).
FAQs
Unknown package
We found that ucf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Astral unveils pyx, a Python-native package registry in beta, designed to speed installs, enhance security, and integrate deeply with uv.
Security News
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.
Security News
The latest Opengrep releases add Apex scanning, precision rule tuning, and performance gains for open source static code analysis.