security_doctor 0.6.0
security_doctor: ^0.6.0 copied to clipboard
Security audit for Flutter and Dart apps: OWASP MASVS and CWE mapped checks for Dart code, configs and native manifests. Built for CI.
We analyzed this package 3 days ago, and awarded it 160 pub points (of a possible 160):
10/10 points: Provide a valid pubspec.yaml
5/5 points: Provide a valid README.md
5/5 points: Provide a valid CHANGELOG.md
10/10 points: Use an OSI-approved license
Detected license: MIT.
10/10 points: 20% or more of the public API has dartdoc comments
126 out of 203 API elements (62.1 %) have documentation comments.
Some symbols that are missing documentation: security_doctor.AuditConfig.AuditConfig.new, security_doctor.AuditConfig.AuditConfig.parse, security_doctor.AuditConfig.copyWith, security_doctor.AuditConfig.ruleEnabled, security_doctor.AuditReport.AuditReport.new.
10/10 points: Package has an example
20/20 points: Supports 5 of 6 possible platforms (iOS, Android, Web, Windows, macOS, Linux)
-
✓ Android
-
✓ iOS
-
✓ Windows
-
✓ Linux
-
✓ macOS
These platforms are not supported:
Package not compatible with platform Web
Because:
package:security_doctor/security_doctor.dartthat imports:package:security_doctor/src/rules/sd010_debuggable_entitlements.dartthat imports:package:security_doctor/src/rule.dartthat imports:package:analyzer/dart/ast/ast.dartthat imports:package:analyzer/src/dart/ast/ast.dartthat imports:package:analyzer/src/utilities/extensions/ast.dartthat imports:package:analyzer/src/dart/element/element.dartthat imports:package:analyzer/src/utilities/extensions/element.dartthat imports:package:analyzer/src/diagnostic/diagnostic.dartthat imports:package:analyzer/dart/element/type.dartthat imports:package:analyzer/src/dart/element/type.dartthat imports:package:analyzer/src/dart/element/type_system.dartthat imports:package:analyzer/src/generated/inference_log.dartthat imports:package:analyzer/src/generated/resolver.dartthat imports:package:analyzer/src/util/ast_data_extractor.dartthat imports:package:analyzer/dart/element/element.dartthat imports:package:analyzer/src/dart/resolver/scope.dartthat imports:package:analyzer/src/generated/engine.dartthat imports:package:analyzer/src/analysis_options/analysis_options.dartthat imports:package:analyzer/src/analysis_rule/rule_context.dartthat imports:package:analyzer/analysis_rule/analysis_rule.dartthat imports:package:analyzer/src/analysis_rule/analysis_rule.dartthat imports:package:analyzer/src/lint/pub.dartthat imports:package:analyzer/source/file_source.dartthat imports:package:analyzer/file_system/file_system.dartthat imports:package:watcher/watcher.dartthat imports:package:watcher/src/file_watcher/polling.dartthat imports:package:watcher/src/polling.dartthat imports:dart:io
50/50 points: code has no errors, warnings, lints, or formatting issues
10/10 points: All of the package dependencies are supported in the latest version
| Package | Constraint | Compatible | Latest | Notes |
|---|---|---|---|---|
analyzer |
>=8.0.0 <15.0.0 |
14.1.0 | 14.1.0 | |
args |
^2.7.0 |
2.7.0 | 2.7.0 | |
crypto |
^3.0.6 |
3.0.7 | 3.0.7 | |
glob |
^2.1.2 |
2.1.3 | 2.1.3 | |
xml |
>=6.5.0 <8.0.0 |
7.0.1 | 7.0.1 | |
yaml |
^3.1.2 |
3.1.3 | 3.1.3 |
Transitive dependencies
| Package | Constraint | Compatible | Latest | Notes |
|---|---|---|---|---|
_fe_analyzer_shared |
- | 105.0.0 | 105.0.0 | |
async |
- | 2.13.1 | 2.13.1 | |
collection |
- | 1.19.1 | 1.19.1 | |
convert |
- | 3.1.2 | 3.1.2 | |
file |
- | 7.0.1 | 7.0.1 | |
meta |
- | 1.19.0 | 1.19.0 | |
package_config |
- | 3.0.0 | 3.0.0 | |
path |
- | 1.9.1 | 1.9.1 | |
petitparser |
- | 7.0.2 | 7.0.2 | |
pub_semver |
- | 2.2.0 | 2.2.0 | |
source_span |
- | 1.10.2 | 1.10.2 | |
string_scanner |
- | 1.4.1 | 1.4.1 | |
term_glyph |
- | 1.2.2 | 1.2.2 | |
typed_data |
- | 1.4.0 | 1.4.0 | |
watcher |
- | 1.2.1 | 1.2.1 |
To reproduce run dart pub outdated --no-dev-dependencies --up-to-date --no-dependency-overrides.
10/10 points: Package supports latest stable Dart and Flutter SDKs
20/20 points: Compatible with dependency constraint lower bounds
pub downgrade does not expose any static analysis error.
Analyzed with Pana 0.23.14, Dart 3.12.2.
Check the analysis log for details.