feat(swift): Package.resolved reader + SwiftURL OSV scanning (no registry client) - #97

Open

justin13888 wants to merge 27 commits into

feat/84-pom-xml-parserfrom

feat/85-swift-package-resolved

Commits on Sep 1, 2026

feat(core): read Package.resolved v2 and v3
justin13888
committed
7dc0751
feat(core): add the Swift ecosystem
justin13888
committed
8351c58
feat(fetch): scan an ecosystem that has no registry
justin13888
committed
859c95c
feat(fetch): let a caller decline an ecosystem that has no registry
justin13888
committed
e844737
feat(swift): report that currency is unknown for every Swift dependency
justin13888
committed
30912ab
fix(cli): never tell a Swift project it is already up to date
justin13888
committed
4dbf399
docs(fetch): say what a registry-less check does not emit
justin13888
committed
cdb5c57
fix(core): stop a truncated JSON document crashing the scanner
justin13888
committed
9acf7c1
fix(swift): stop Package.resolved answering questions it cannot
justin13888
committed
cc77be0
fix(fetch): ask OSV every spelling of a name, and warn only about a run that did not fetch
justin13888
committed
e35946c
fix(fetch): keep one project from adopting another's dependency list
justin13888
committed
d889a8a
docs(readme): say what a Swift check leaves unestablished
justin13888
committed
44d4494
Merge remote-tracking branch 'origin/feat/84-pom-xml-parser' into feat/85-swift-package-resolved
justin13888
committed
27e199b
fix(core): strip a port from a Swift package host
justin13888
committed
5358685
fix(cli): let --no-lock-file suppress annotations, not the list itself
justin13888
committed
c0f8c86
feat(report): say when a project's dependency list went unread
justin13888
committed
06bcd6d
test(swift): cover a Package.resolved project end to end
justin13888
committed
24a264f
Merge remote-tracking branch 'origin/feat/84-pom-xml-parser' into feat/85-swift-package-resolved
justin13888
committed
0ab4e6a
fix(fetch): let --no-lock-file suppress annotations for check too
justin13888
committed
21b9132
fix(core): read an SCP-shorthand colon as a path separator, never a port
justin13888
committed
1193ba3
fix(report): unwrap DEP003's strings and stop overloading its status key
justin13888
committed
f0f0209
fix(report): carry an unread dependency list into the report itself
justin13888
committed
e060ef4
fix(core): a port is digits, so a non-numeric segment is not one
justin13888
committed
58579a4
fix(report): head an unread dependency list as unread, not as zero
justin13888
committed
5616ebc

Navigation Menu

feat(swift): Package.resolved reader + SwiftURL OSV scanning (no registry client) - #97

feat(swift): Package.resolved reader + SwiftURL OSV scanning (no registry client)#97
justin13888 wants to merge 27 commits into
feat/84-pom-xml-parserfrom
feat/85-swift-package-resolved

Commits on Sep 1, 2026

feat(core): read Package.resolved v2 and v3

feat(core): add the Swift ecosystem

feat(fetch): scan an ecosystem that has no registry

feat(fetch): let a caller decline an ecosystem that has no registry

feat(swift): report that currency is unknown for every Swift dependency

fix(cli): never tell a Swift project it is already up to date

docs(fetch): say what a registry-less check does not emit

fix(core): stop a truncated JSON document crashing the scanner

fix(swift): stop Package.resolved answering questions it cannot

fix(fetch): ask OSV every spelling of a name, and warn only about a run that did not fetch

fix(fetch): keep one project from adopting another's dependency list

docs(readme): say what a Swift check leaves unestablished

Merge remote-tracking branch 'origin/feat/84-pom-xml-parser' into feat/85-swift-package-resolved

fix(core): strip a port from a Swift package host

fix(cli): let --no-lock-file suppress annotations, not the list itself

feat(report): say when a project's dependency list went unread

test(swift): cover a Package.resolved project end to end

Merge remote-tracking branch 'origin/feat/84-pom-xml-parser' into feat/85-swift-package-resolved

fix(fetch): let --no-lock-file suppress annotations for check too

fix(core): read an SCP-shorthand colon as a path separator, never a port

fix(report): unwrap DEP003's strings and stop overloading its status key

fix(report): carry an unread dependency list into the report itself

fix(core): a port is digits, so a non-numeric segment is not one

fix(report): head an unread dependency list as unread, not as zero

Commits on Sep 6, 2026

fix(cli): carry the unread and undetermined caveats into the GitHub summary

fix(cli): stop fix calling an unread project up to date

chore(fetch): merge feat/84-pom-xml-parser into feat/85-swift-package-resolved