# Contributor: Nathan Johnson <nathan@nathanjohnson.info>
# Contributor: Dave Hall <skwashd@gmail.com>
# Maintainer: Paolo Barbolini <paolo.barbolini@m4ss.net>
pkgname=composer
pkgver=2.8.10
pkgrel=0
pkgdesc="Dependency manager for PHP"
url="https://getcomposer.org/"
arch="noarch"
license="MIT"
_php=php83
depends="$_php
	$_php-phar
	$_php-curl
	$_php-iconv
	$_php-mbstring
	$_php-openssl
	$_php-zip
	p7zip
	"
checkdepends="git"
options="net"
source="$pkgname-$pkgver.phar::https://getcomposer.org/download/$pkgver/composer.phar"
subpackages="$pkgname-bash-completion"

# secfixes:
#   2.7.7-r0:
#     - CVE-2024-35241
#     - CVE-2024-35242
#   2.7.0-r0:
#     - CVE-2024-24821
#   2.6.4-r0:
#     - CVE-2023-43655
#   2.3.5-r0:
#     - CVE-2022-24828
#   2.1.9-r0:
#     - CVE-2021-41116
#   2.0.13-r0:
#     - CVE-2021-29472

build() {
	$_php "$srcdir"/$pkgname-$pkgver.phar completion bash > "$srcdir"/$pkgname.bash
}

check() {
	cd "$srcdir"
	$_php $pkgname-$pkgver.phar -Vn
	$_php $pkgname-$pkgver.phar -n diagnose || true # fails as pub-keys are missing
}

package() {
	install -m 0755 -D "$srcdir"/$pkgname-$pkgver.phar "$pkgdir"/usr/bin/$pkgname.phar
	printf "#!/bin/sh\n\n/usr/bin/%s /usr/bin/composer.phar \"\$@\"\n" "$_php" \
		> "$pkgdir"/usr/bin/$pkgname
	chmod +x "$pkgdir"/usr/bin/$pkgname
	install -Dm644 "$srcdir"/$pkgname.bash \
		"$pkgdir"/usr/share/bash-completion/completions/$pkgname
}

sha512sums="
be8566dbe6a0d52ea4a56072546a63886df11dd2f6e67ce3eb4f232c4d7728ca8903c2648db7b7f06a56d99dec6522e0b53e00eb5083a9976844cf98da2ecf00  composer-2.8.10.phar
"
