🪨 YAMLRocks!

Author: frenck

.clusterfuzzlite/Dockerfile

@@ -0,0 +1,7 @@
+# Build environment for ClusterFuzzLite. base-builder-rust provides the Rust
+# toolchain, cargo-fuzz, and the sanitizer setup that OSS-Fuzz uses.
+FROM gcr.io/oss-fuzz-base/base-builder-rust
+
+COPY . $SRC/yamlrocks
+WORKDIR $SRC/yamlrocks
+COPY .clusterfuzzlite/build.sh $SRC/build.sh

.clusterfuzzlite/build.sh

@@ -0,0 +1,14 @@
+#!/bin/bash -eu
+# Compile every libFuzzer target and copy the binaries to $OUT, as
+# ClusterFuzzLite/OSS-Fuzz expect. base-builder-rust supplies cargo-fuzz and the
+# RUSTFLAGS for the active sanitizer.
+cd "$SRC/yamlrocks"
+
+cargo fuzz build -O
+
+# The release directory lives under a target-triple subdirectory; there is
+# exactly one, so a glob resolves it without hardcoding the triple.
+for target in fuzz/fuzz_targets/*.rs; do
+    name="$(basename "${target%.*}")"
+    cp fuzz/target/*/release/"${name}" "$OUT/"
+done

.clusterfuzzlite/project.yaml

@@ -0,0 +1,5 @@
+language: rust
+sanitizers:
+  - address
+fuzzing_engines:
+  - libfuzzer

.devcontainer/devcontainer.json

@@ -0,0 +1,39 @@
+{
+  "name": "yamlrocks",
+  "image": "mcr.microsoft.com/devcontainers/rust:1-bookworm",
+  "features": {
+    "ghcr.io/devcontainers/features/python:1": {
+      "version": "3.14",
+      "installTools": true
+    },
+    "ghcr.io/devcontainers/features/node:1": {
+      "version": "lts"
+    }
+  },
+  "postCreateCommand": ".devcontainer/post-create.sh",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "rust-lang.rust-analyzer",
+        "ms-python.python",
+        "charliermarsh.ruff",
+        "tamasfe.even-better-toml",
+        "astro-build.astro-vscode",
+        "redhat.vscode-yaml"
+      ],
+      "settings": {
+        "python.defaultInterpreterPath": "/workspaces/yamlrocks/.venv/bin/python",
+        "[python]": {
+          "editor.defaultFormatter": "charliermarsh.ruff"
+        },
+        "[rust]": {
+          "editor.defaultFormatter": "rust-lang.rust-analyzer"
+        },
+        "editor.formatOnSave": true,
+        "files.insertFinalNewline": true,
+        "files.trimTrailingWhitespace": true
+      }
+    }
+  },
+  "remoteUser": "vscode"
+}

.devcontainer/post-create.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# Set up the yamlrocks development environment inside the dev container.
+set -euo pipefail
+
+echo "Creating virtual environment and installing tooling..."
+python3 -m venv .venv
+# shellcheck disable=SC1091
+source .venv/bin/activate
+
+pip install --upgrade pip
+pip install maturin pytest pyyaml ruff mypy codespell
+
+echo "Adding Rust components..."
+rustup component add rustfmt clippy
+
+echo "Building yamlrocks (debug)..."
+maturin develop
+
+echo
+echo "Dev container ready. Activate with: source .venv/bin/activate"
+echo "Run the tests with:  pytest -q"

.editorconfig

@@ -0,0 +1,30 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 4
+
+[*.{rs}]
+indent_size = 4
+
+[*.{py,pyi}]
+indent_size = 4
+
+[*.{yaml,yml,json,toml,md,mdx,mjs,js,ts}]
+indent_size = 2
+
+[Makefile]
+indent_style = tab
+
+# Vendored test data and snapshots are kept byte-for-byte.
+[tests/yaml_test_suite/cases/**]
+trim_trailing_whitespace = false
+insert_final_newline = false
+
+[tests/snapshots/**]
+trim_trailing_whitespace = false
+insert_final_newline = false

.gitattributes

@@ -0,0 +1,20 @@
+# Normalize text files to LF in the repository and working tree, so the parser's
+# byte-for-byte round-trip and snapshot tests stay stable on every platform; a
+# CRLF checkout would otherwise change file bytes and fail them. Files that git
+# detects as binary (some test fixtures hold non-UTF-8 bytes by design) are left
+# exactly as committed.
+* text=auto eol=lf
+
+# Flag whitespace errors in diffs for the code we hand-write.
+*.py whitespace=error
+*.rs whitespace=error
+
+# Keep lockfiles and generated artifacts out of GitHub's language statistics.
+Cargo.lock              linguist-generated=true
+uv.lock                 linguist-generated=true
+docs/package-lock.json  linguist-generated=true
+THIRD_PARTY_LICENSES.md linguist-generated=true
+
+# Test fixtures and the documentation site are not the project's source language.
+tests/data/**           linguist-vendored=true
+docs/**                 linguist-documentation=true

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @frenck

.github/FUNDING.yml

@@ -0,0 +1,4 @@
+---
+github: frenck
+patreon: frenck
+custom: https://frenck.dev/donate/

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,50 @@
+name: 🐛 Bug report
+description: Report a problem with yamlrocks
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to report a bug. Please fill in the details
+        below so it can be reproduced.
+
+        Using AI tools to help write this report is fine, but review and
+        understand it yourself first. See the
+        [AI Policy](https://github.com/frenck/yamlrocks/blob/main/AI_POLICY.md);
+        autonomously created issues will be closed.
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: A clear description of the problem.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction
+      description: A minimal YAML input and the yamlrocks call that triggers the bug.
+      render: python
+      placeholder: |
+        import yamlrocks
+        yamlrocks.loads(b"...")
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: yamlrocks version
+    validations:
+      required: true
+  - type: input
+    id: python
+    attributes:
+      label: Python version and platform
+    validations:
+      required: true