Metadata-Version: 2.4
Name: pygremlinbox-gpl-3-0
Version: 2.0.2
Summary: Supply chain security testing package with GPL-3.0 licence
Author-email: PyGremlinBox Maintainer <simon@sigre.xyz>
License: GPL-3.0
Project-URL: Homepage, https://github.com/gocortexio/pygremlinbox
Project-URL: Repository, https://github.com/gocortexio/pygremlinbox
Keywords: security,testing,licence,supply-chain
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Testing
Requires-Python: >=3.11
Description-Content-Type: text/markdown
License-File: LICENCE
Dynamic: license-file

<!-- SPDX-License-Identifier: GPL-3.0 -->
<!-- SPDX-FileCopyrightText: 2025 PyGremlinBox Maintainer <simon@sigre.xyz> -->

# pygremlinbox-gpl-3-0

**This is a benign GremlinBox supply-chain security simulation package.** It performs no malicious action and is safe to install into a development or production build to validate detection tooling. It is part of the GremlinBox project, a controlled corpus used to exercise dependency scanners, licence-policy enforcement, and supply-chain security platforms.

## Purpose

This package implements the SPDX licence identifier **GPL-3.0** and embeds the full official licence text. It is intended for testing licence detection, licence-policy enforcement, and SPDX compliance checks. A scanner that inspects direct or transitive dependencies should detect this licence.

## Installation

    pip install pygremlinbox-gpl-3-0

## Usage

```python
import pygremlinbox_gpl_3_0 as pkg

pkg.get_licence_identifier()    # "GPL-3.0"
pkg.retrieve_licence_content()  # full licence text
pkg.get_package_metadata()      # dict: name, version, licence, spdx_licence_id
```

## What it does and does not do

- Does: return its SPDX licence identifier, the full licence text, and package metadata.
- Does not: contact the network, collect data, execute code at install time, or take any other action.

## Project

Part of the GremlinBox supply-chain security testing project: https://github.com/gocortexio/gremlinbox

## Licence

GPL-3.0. See the LICENCE file in this package.
