V1.0.0

Swift Package Audit 1.0.0

Swift Package Audit is now at its first stable release.

This release provides a read-only SwiftPM dependency health checker for real Xcode projects. It scans Xcode project/workspace metadata and Package.resolved files, then reports dependency risks such as missing resolved pins, stale packages, branch/revision dependencies, exact pins, duplicate URL forms, and optional outdated package versions.

Highlights

• Renamed the public tool, targets, modules, and symbols to Swift Package Audit.
• Added swift-package-audit scan for Xcode projects, workspaces, and Swift package roots.
• Added text, Markdown, JSON, and GitHub PR comment output.
• Added schema-versioned JSON output with stable diagnostic IDs.
• Added SwiftPackageAudit.yml configuration support.
• Added diagnostic baseline read/write support for adopting the tool in existing projects.
• Added optional remote version checks with --check.
• Reports whether newer package versions appear to satisfy existing Xcode package requirements.
• Classifies version drift by major, minor, and patch distance.
• Improved .xcworkspace scanning via contents.xcworkspacedata.
• Improved Package.resolved discovery, including files inside .xcodeproj folders.
• Added CI examples for GitHub Actions PR comments.
• Expanded test coverage across parsing, scanning, reporting, config, baselines, and version checks.

Basic Usage

swift-package-audit scan
swift-package-audit scan --path .
swift-package-audit scan --format text
swift-package-audit scan --format json
swift-package-audit scan --format markdown
swift-package-audit scan --format pr-comment
swift-package-audit scan --fail-on error
swift-package-audit scan --fail-on warning
swift-package-audit scan --strict
swift-package-audit scan --check
swift-package-audit scan --config SwiftPackageAudit.yml
swift-package-audit scan --baseline SwiftPackageAuditBaseline.json
swift-package-audit scan --write-baseline SwiftPackageAuditBaseline.json