erlef/rebar3_hex

This system is the rebar3 Hex plugin, which integrates the Hex package manager into the Erlang build tool rebar3. It provides a suite of commands for managing users, organizations, repositories, and packages, including publishing, searching, and retiring releases. The codebase includes core infrastructure for argument parsing, state management, and HTTP client configuration, supported by a comprehensive test suite that validates authentication flows and end-to-end package operations.

The \rebar3\_hex\ module has been restored to the \src\ directory, providing the central entry point for the rebar3 Hex plugin. This change re-establishes the core infrastructure by exporting utility functions for argument parsing and state management, and explicitly registering the full suite of Hex providers (user, build, cut, owner, organization, repo, search, retire, outdated, and publish) during initialization. It also ensures that the custom HTTP client adapter is correctly applied to all configured repositories, enabling the plugin's commands to function as a cohesive unit.

src · high confidence

Added test support infrastructure for Hex API and authentication; Initial Common Test suite for rebar3\_hex.

The project license has been switched from the original BSD-style license to the Apache License 2.0. Additionally, the dependency list has been updated: the previous git-based dependencies (erlware\_commons, jsx) have been replaced with hex packages hex\_core (0.19.0) and verl (1.1.1), and the rebar.lock file has been regenerated to reflect these changes.

(repo-wide) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 63 → 61 (-2.0)
• Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

• Code Health 98 → 98 (-0.3)
• Architecture 100 → 100 (+0.0)
• Maturity 35 → 38 (+3.0)
• Readiness 73 → 60 (-13.2)
• Security 100 → 100 (+0.0)
• Event Sourcing 100 → 100 (+0.0)

• Coverage not measured — no coverage collector is wired up
• Documentation: no architecture or design documentation (README.md)
• Further orphaned files (smaller)
• Off-boarding risk: anonymized user #1
• Orphaned knowledge (src/rebar3_hex_user.erl)
• TodoComment (src/rebar3_hex_user.erl)
• TodoComment (test/rebar3_hex_integration_SUITE.erl)
• TodoComment (test/rebar3_hex_integration_SUITE.erl)

• Hotspot: src/rebar3_hex_publish.erl (src/rebar3_hex_publish.erl)
• Off-boarding risk: anonymized user #1
• TodoComment (test/rebar3_hex_integration_SUITE.erl)
• rebar3_hex_user.handle_task (cognitive 18) (src/rebar3_hex_user.erl)

• 5 commits — 5 feature/other, 0 fixes

• .github/workflows — 4 commits
• test/support — 1 commit

• change: Bump the actions group with 3 updates (#385)
• change: Bump the actions group with 4 updates (#383)
• change: Implement Hex Auth (#361)
• change: Test 3.27.0 across the bar for now
• change: Update CI matrix (#379)

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

erlef/rebar3_hex was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.