sbom 1.0.4 
sbom: ^1.0.4 copied to clipboard
darticulate.comA Software Bill of Materials generator specifically for Dart packages.
We analyzed this package 11 hours ago, and awarded it 140 pub points (of a possible 160):
0/10 points: Provide a valid pubspec.yaml
Failed to verify repository URL.
Please provide a valid repository URL in pubspec.yaml, such that:
repositorycan be cloned,- a clone of the repository contains a
pubspec.yaml, which:,- contains
name: sbom, - contains a
versionproperty, and, - does not contain a
publish_toproperty.
- contains
Repository has multiple matching pubspec.yaml with name: sbom.
5/5 points: Provide a valid README.md
5/5 points: Provide a valid CHANGELOG.md
10/10 points: Use an OSI-approved license
Detected license: MIT.
10/10 points: 20% or more of the public API has dartdoc comments
126 out of 242 API elements (52.1 %) have documentation comments.
Some symbols that are missing documentation: sbom, sbom.SbomConstants.binDir, sbom.SbomConstants.louder, sbom.SbomConstants.pubspecDescription, sbom.SbomConstants.pubspecVersion.
10/10 points: Package has an example
20/20 points: Supports 5 of 6 possible platforms (iOS, Android, Web, Windows, macOS, Linux)
-
✓ Android
-
✓ iOS
-
✓ Windows
-
✓ Linux
-
✓ macOS
These platforms are not supported:
Package not compatible with platform Web
Because:
package:sbom/sbom.dartthat imports:package:pub_cache/pub_cache.dartthat imports:package:pub_cache/src/impl.dartthat imports:dart:io
0/0 points: WASM compatibility
Package not compatible with runtime wasm
Because:
package:sbom/sbom.dartthat imports:package:pub_cache/pub_cache.dartthat imports:package:pub_cache/src/impl.dartthat imports:dart:io
This package is not compatible with runtime wasm, and will not be rewarded full points in a future version of the scoring model.
See https://dart.dev/web/wasm for details.
40/50 points: code has no errors, warnings, lints, or formatting issues
Found 21 issues. Showing the first 2:
INFO: The part-of directive uses a library name.
lib/src/generation/sbom_generator.dart:8:1
╷
8 │ part of sbom;
│ ^^^^^^^^^^^^^
╵
To reproduce make sure you are using the lints_core and run dart analyze lib/src/generation/sbom_generator.dart
INFO: The part-of directive uses a library name.
lib/src/generation/sbom_ioutput_generator.dart:8:1
╷
8 │ part of sbom;
│ ^^^^^^^^^^^^^
╵
To reproduce make sure you are using the lints_core and run dart analyze lib/src/generation/sbom_ioutput_generator.dart
10/10 points: All of the package dependencies are supported in the latest version
| Package | Constraint | Compatible | Latest |
|---|---|---|---|
args |
^2.3.1 |
2.6.0 | 2.6.0 |
crypto |
^3.0.2 |
3.0.6 | 3.0.6 |
meta |
^1.8.0 |
1.16.0 | 1.16.0 |
path |
^1.8.2 |
1.9.1 | 1.9.1 |
pub_cache |
^0.3.1 |
0.3.2 | 0.3.2 |
yaml |
^3.1.1 |
3.1.2 | 3.1.2 |
Transitive dependencies
| Package | Constraint | Compatible | Latest |
|---|---|---|---|
collection |
- | 1.19.1 | 1.19.1 |
pub_semver |
- | 2.1.4 | 2.1.4 |
source_span |
- | 1.10.0 | 1.10.0 |
string_scanner |
- | 1.4.0 | 1.4.0 |
term_glyph |
- | 1.2.1 | 1.2.1 |
typed_data |
- | 1.4.0 | 1.4.0 |
To reproduce run dart pub outdated --no-dev-dependencies --up-to-date --no-dependency-overrides.
10/10 points: Package supports latest stable Dart and Flutter SDKs
20/20 points: Compatible with dependency constraint lower bounds
pub downgrade does not expose any static analysis error.
Analyzed with Pana 0.22.15, Dart 3.5.4.
Check the analysis log for details.
Metadata
Publisher
Metadata
A Software Bill of Materials generator specifically for Dart packages.
Repository (GitHub)
View/report issues
Documentation
Funding
Consider supporting this project:
www.darticulate.com
License
MIT (license)
Dependencies
args, crypto, meta, path, pub_cache, yaml
