Skip to content

Cooldown dates for pip and Homebrew, Socket scope hint, install.sh progress - #5

Closed
evan4567 wants to merge 3 commits into
adamtty:mainfrom
evan4567:edorer1/cooldown-updates-and-install-notes
Closed

evan4567 wants to merge 3 commits into
adamtty:mainfrom
evan4567:edorer1/cooldown-updates-and-install-notes

Conversation

@evan4567

Copy link
Copy Markdown
Contributor
  • Cooldown: pip and Homebrew now count the cooldown from each release (PyPI upload date; first bottle build on ghcr.io) instead of from the first scan. pip rows no longer show a cooldown, since pkgdash doesn't update them.
  • Socket.dev: the setup page and README say the token only needs the packages:list scope.
  • install.sh: prints each step, checks prerequisites before stopping anything, and reports codesign failures instead of exiting silently.

🤖 Generated with Claude Code

pip and Homebrew had no release-date lookup, so their cooldown counted from
when a scan first saw a version: everything showed the full period left,
even releases that were months old.

- pip: upload date from PyPI, shared with uv tools (pypi_released)
- Homebrew formulae: the build date of the version's first bottle on
  ghcr.io (each scan looks up the outdated formulae's ghcr repos with one
  `brew info`; the manifest is read with ghcr's anonymous token). Casks and
  tap formulae have no bottles there and still count from first seen
- No cooldown shown or counted for managers pkgdash doesn't update (pip):
  the dashboard and Outdated page list them as "to update by hand" instead
  of "ready to update"

Existing installs pick up the real dates at the next scan.
The setup page and README now say the token only needs packages:list:
pkgdash only calls organizations, quota and the batch PURL lookup, all
read-only. The setup page's test only calls organizations, so it can't
check scopes; a missing one shows up as an HTTP 403 in the next scan's log.
- A "==>" line before each step, dots while waiting for the old service
  to stop, and a note when the menu bar app is being built (swiftc can
  take a minute) or left as it is
- Check for Apple Silicon, the Xcode Command Line Tools and swiftc before
  stopping anything, so a failed install leaves a running pkgdash alone
- codesign errors are printed instead of exiting silently under set -e,
  and the unsigned binary is removed so the next run rebuilds it
- uninstall says where the kept state is
@evan4567 evan4567 closed this Oct 20, 2026
@evan4567
evan4567 deleted the edorer1/cooldown-updates-and-install-notes branch October 20, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant