flutter_auditor 1.0.0 
flutter_auditor: ^1.0.0 copied to clipboard
A CLI that audits Flutter projects for security misconfigurations (Android manifest, iOS Info.plist, hardcoded secrets, insecure network/storage) and dependency hygiene issues.
1.0.0 #
Initial release.
- Android audits:
allowBackup, cleartext traffic, exported components, debuggable flag, manifest permissions, Network Security Configuration, and backup/data-extraction rules. - iOS audits: App Transport Security exceptions,
UIFileSharingEnabled, and usage-description strings (empty, mismatched, or missing). - Cross-platform source scans: hardcoded secrets, insecure network usage
(cleartext URLs, disabled certificate validation, WebView SSL bypass),
and insecure storage (
SharedPreferences, unencrypted Hive boxes). - Dependency hygiene: outdated/discontinued/restricted-license packages, an outdated Dart SDK constraint, and unused dependencies.
- Console report with severity-grouped findings and a pass/fail exit code.
- HTML report (
--html) with a severity donut chart and category bar chart, viewable offline;--openlaunches it in the browser.
Metadata
2
likes
150
points
110
downloads
Documentation
Publisher
unverified uploader
Weekly Downloads
Metadata
A CLI that audits Flutter projects for security misconfigurations (Android manifest, iOS Info.plist, hardcoded secrets, insecure network/storage) and dependency hygiene issues.
Repository (GitHub)
View/report issues
License
MIT (license)
Dependencies
args, path, pub_semver, xml, yaml