Fixed /tmp directory can be outside open_basedir scope. This fixes it using PHP config which is expected to be correct (and sys_get_temp_dir will return /tmp by default if no config is set).

Reading the readme would make me want to use the project, one thing is missing: you put a line that does a var_dump, but why not also adding the output of the var_dump?

As a contributor to Mega-Linter project, I used it as a QA tools that checks lot of things, including dead links in Markdown files.

markdown-lint-check do the job and report that 2 dead links were found in README.md, about SensioLabsInsight button

      ERROR: 2 dead links found!
      [✖] https://insight.sensiolabs.com/projects/d8cc6035-69ad-477d-bd1a-ccc605480fd7 → Status: 0
      [✖] https://insight.sensiolabs.com/projects/d8cc6035-69ad-477d-bd1a-ccc605480fd7/mini.png → Status: 0

See https://github.com/phar-io/manifest/blame/master/README.md#L7

Following issue https://github.com/phar-io/version/issues/28 that is now fixed, I may propose a solution to parse any composer.lock file to generate a Manifest.

Goal Write a manifest from any Github repositories, quickly without xml structure errors with the real components installed !

To avoid rewrites too much code, I've reused lot of existing architecture as much as possible.

That means:

• Usage

<?php
use PharIo\Manifest\ManifestLoader;
use PharIo\Manifest\ManifestSerializer;

$manifest = ManifestLoader::fromComposer("/path/to/composer.lock");

echo (new ManifestSerializer)->serializeToString($manifest);

• Source Code

New exception PharIo\Manifest\NotEncodableValueException is raised if composer.lock could not be decoded.

All new elements are in new directory src/json to separate from other existing elements.

Add a new example to demonstrate feature with a PHPUnit 5.6.5 composer.lock (generated today, with existing dependencies versions)

• WARNINGs

As composer.lock does not contains all necessary informations required to generate a fully real manifest, some entry are built with defaults:

• contains tag
• copyright tag

Here is an example to build the manifest of PHPUnit 5.6.5 (compares with https://github.com/phar-io/manifest/blob/master/tests/_fixture/phpunit-5.6.5.xml)

<?php
// script examples/example-02.php
use PharIo\Manifest\ManifestLoader;
use PharIo\Manifest\ManifestSerializer;

require __DIR__ . '/../vendor/autoload.php';

$manifest = ManifestLoader::fromComposer(
    dirname(__DIR__) . '/tests/_fixture/phpunit-5.6.5_composer.lock'
);

echo (new ManifestSerializer)->serializeToString($manifest);

That prints following manifest

<?xml version="1.0" encoding="UTF-8"?>
<phar xmlns="https://phar.io/xml/manifest/1.0">
    <contains name="vendor/package" version="0.0.0-dev" type="library"/>
    <copyright>
        <author name="John Doe" email="[email protected]"/>
        <license type="MIT" url="https://spdx.org/licenses/MIT.html"/>
    </copyright>
    <requires>
        <php version="^5.6 || ^7.0">
            <ext name="dom"/>
            <ext name="json"/>
            <ext name="mbstring"/>
            <ext name="xml"/>
            <ext name="libxml"/>
        </php>
    </requires>
    <bundles>
        <component name="doctrine/instantiator" version="1.0.5"/>
        <component name="myclabs/deep-copy" version="1.7.0"/>
        <component name="phpdocumentor/reflection-common" version="1.0.1"/>
        <component name="phpdocumentor/reflection-docblock" version="3.3.2"/>
        <component name="phpdocumentor/type-resolver" version="0.4.0"/>
        <component name="phpspec/prophecy" version="1.10.3"/>
        <component name="phpunit/php-code-coverage" version="4.0.8"/>
        <component name="phpunit/php-file-iterator" version="1.4.5"/>
        <component name="phpunit/php-text-template" version="1.2.1"/>
        <component name="phpunit/php-timer" version="1.0.9"/>
        <component name="phpunit/php-token-stream" version="1.4.12"/>
        <component name="phpunit/phpunit-mock-objects" version="3.4.4"/>
        <component name="sebastian/code-unit-reverse-lookup" version="1.0.2"/>
        <component name="sebastian/comparator" version="1.2.4"/>
        <component name="sebastian/diff" version="1.4.3"/>
        <component name="sebastian/environment" version="2.0.0"/>
        <component name="sebastian/exporter" version="2.0.0"/>
        <component name="sebastian/global-state" version="1.1.1"/>
        <component name="sebastian/object-enumerator" version="2.0.1"/>
        <component name="sebastian/recursion-context" version="2.0.0"/>
        <component name="sebastian/resource-operations" version="1.0.0"/>
        <component name="sebastian/version" version="2.0.1"/>
        <component name="symfony/polyfill-ctype" version="1.19.0"/>
        <component name="symfony/yaml" version="3.4.47"/>
        <component name="webmozart/assert" version="1.9.1"/>
    </bundles>
</phar>

Similar to theseer/tokenizer#9, adding a .gitattributes file with export-ignore rules can greatly reduce the zip file size as it excludes tests, examples, and other build/test related files.

Thank you.

The 1.0.1 release uses the deprecated \PHPUnit_Framework_TestCase class within its tests. This prevents me from installing PHPUnit since this package is required by phpunit/phpunit and the tests fail.

Context Create a manifest from Composer data

Consider reading the Composer schema. We will see that only the author's name of the package is required. Email is optional !

Current behaviour Cannot create a valid PharIo\Manifest\Author object without a valid email address.

Expected behaviour Be able to create a valid PharIo\Manifest\Author object without Email.

Script to reproduce issue

<?php

use PharIo\Manifest\Author;
use PharIo\Manifest\AuthorCollection;
use PharIo\Manifest\Email;

$authorsCollection = new AuthorCollection();
foreach ($composerJson['authors'] as $author) {
    $authorsCollection->add(
        new Author($author['name'], new Email('[email protected]')),
    );
}

From https://github.com/sebastianbergmann/phpunit/runs/3112779264:

Deprecated: Return type of PharIo\Manifest\ElementCollection::current() should either be compatible with
Iterator::current(): mixed, or the #[ReturnTypeWillChange] attribute should be used to temporarily suppress
the notice in /home/runner/work/phpunit/phpunit/vendor/phar-io/manifest/src/xml/ElementCollection.php on line 27

Deprecated: Return type of PharIo\Manifest\ElementCollection::key() should either be compatible with
Iterator::key(): mixed, or the #[ReturnTypeWillChange] attribute should be used to temporarily suppress
the notice in /home/runner/work/phpunit/phpunit/vendor/phar-io/manifest/src/xml/ElementCollection.php on line 33

Deprecated: Return type of PharIo\Manifest\ElementCollection::valid() should either be compatible with
Iterator::valid(): bool, or the #[ReturnTypeWillChange] attribute should be used to temporarily suppress
the notice in /home/runner/work/phpunit/phpunit/vendor/phar-io/manifest/src/xml/ElementCollection.php on line 37

Reference: https://github.com/phar-io/phar.io/issues/89

Adding the ability to read the .github/FUNDING.yml beside the manifest.xml it would be possible to display funding information for the user. Since we are hiding the information if the end-user decides to use phive instead of directly installing using tools with composer.

And using the already existing files the maintenance is near to zero for tools that already have the funding enabled.