pubguardian 0.1.8 
pubguardian: ^0.1.8 copied to clipboard
sonofnos.comSupply-chain security scanner for Dart and Flutter — CVE, license, and abandoned-package checks with SARIF and CycloneDX output.
We analyzed this package 21 hours ago, and awarded it 160 pub points (of a possible 160):
10/10 points: Provide a valid pubspec.yaml
5/5 points: Provide a valid README.md
5/5 points: Provide a valid CHANGELOG.md
10/10 points: Use an OSI-approved license
Detected license: Apache-2.0.
10/10 points: 20% or more of the public API has dartdoc comments
148 out of 151 API elements (98.0 %) have documentation comments.
Some symbols that are missing documentation: pubguardian, pubguardian.CycloneDxFormatter.CycloneDxFormatter.new, pubguardian.SarifFormatter.SarifFormatter.new.
10/10 points: Package has an example
20/20 points: Supports 5 of 6 possible platforms (iOS, Android, Web, Windows, macOS, Linux)
-
✓ Android
-
✓ iOS
-
✓ Windows
-
✓ Linux
-
✓ macOS
These platforms are not supported:
Package not compatible with platform Web
Because:
package:pubguardian/pubguardian.dartthat imports:package:pubguardian/src/runner.dartthat imports:package:pubguardian/src/pubdev/pubdev_client.dartthat imports:package:pubguardian/src/lockfile/lockfile_parser.dartthat imports:dart:io
50/50 points: code has no errors, warnings, lints, or formatting issues
10/10 points: All of the package dependencies are supported in the latest version
| Package | Constraint | Compatible | Latest | Notes |
|---|---|---|---|---|
args |
^2.6.0 |
2.7.0 | 2.7.0 | |
http |
^1.4.0 |
1.6.0 | 1.6.0 | |
yaml |
^3.1.3 |
3.1.3 | 3.1.3 |
Transitive dependencies
| Package | Constraint | Compatible | Latest | Notes |
|---|---|---|---|---|
async |
- | 2.13.1 | 2.13.1 | |
collection |
- | 1.19.1 | 1.19.1 | |
http_parser |
- | 4.1.2 | 4.1.2 | |
meta |
- | 1.19.0 | 1.19.0 | |
path |
- | 1.9.1 | 1.9.1 | |
source_span |
- | 1.10.2 | 1.10.2 | |
string_scanner |
- | 1.4.1 | 1.4.1 | |
term_glyph |
- | 1.2.2 | 1.2.2 | |
typed_data |
- | 1.4.0 | 1.4.0 | |
web |
- | 1.1.1 | 1.1.1 |
To reproduce run dart pub outdated --no-dev-dependencies --up-to-date --no-dependency-overrides.
10/10 points: Package supports latest stable Dart and Flutter SDKs
20/20 points: Compatible with dependency constraint lower bounds
pub downgrade does not expose any static analysis error.
Analyzed with Pana 0.23.16, Dart 3.12.2.
Check the analysis log for details.
Weekly downloads
Metadata
Documentation
Publisher
Weekly Downloads
Metadata
Supply-chain security scanner for Dart and Flutter — CVE, license, and abandoned-package checks with SARIF and CycloneDX output.
Repository (GitHub)
View/report issues
Topics
#security #vulnerability #supply-chain #license #cli
License
Apache-2.0 (license)