pana

pana copied to clipboard

(Filing based on offline discussion.) It's incredibly easy to accidentally add usage of APIs that require a newer version of a dependency than the lower bound for that package. E.g.,...

stuartmorgan-g

Detect and reward packages that are wasm compatible

34

Repurposing this issue to track a specific platform/label of "good" wasm users. This will allow giving "bling" to folks on the package site.

kevmoo

Hybrid package incorrectly marked as Flutter-only

1

Related to: https://github.com/dart-lang/pub/issues/3563 I recently published [native_storage](https://pub.dev/packages/native_storage) which is a hybrid package, capable of being used in Dart-only and Flutter contexts. It has no direct or transitive dependencies on the...

dnys1

Bump archive from 3.3.2 to 3.4.10

1

Bumps [archive](https://github.com/brendan-duncan/archive) from 3.3.2 to 3.4.10. Changelog Sourced from archive's changelog. 3.4.10 - January 2, 2024 Fix ZipCrypto decryption 3.4.9 - November 7, 2023 Revert breaking change for extractArchiveToDisk becoming...

dependabot[bot]

summary.allDependencies include dev_dependencies

3

https://pub.dev/packages/googleclouddatastore/pubspec has `summary.allDependencies` that includes `protoc-plugin`. Context: I noticed this because I have APIs that sanitizes output from pana, and `protoc-plugin` is not a valid package name, so it complained....

jonasfj

Pana should use `dart pub` to download and extract packages.

2

sigurdm

Score packages with dependency on discontinued package lower

2

Consider adding a check that a package as no discontinued dependencies. I would suggest that you get 0 / 10 points for "All of the package dependencies are supported in...

jonasfj

Flutter detection fails when Flutter running for the first time

3

Hi to everyone! I prepared a GitHub action to check the PANA result, but it failed when Flutter runs for the first time because Flutter prints the welcome text. I...

frknkrc44

With #1298 we underreport the issues by omitting missing documentation on default constructors that may be called by users. We should parse the sources better and understand what a client...

isoos

isoos