pana

• Clarified and fixed report summaries.
• Fix: mailto links are no longer classified as unsecure.
• Download URLs recognize .git when linking to a file.

• Fix: handle new --version output from latest Dart SDK.
• Various nit fixes to the generated report.

• Fixed required URL checks in pubspec validation.
• Fixed pub outdated execution - using specified package dir.
• Various nit fixes to the generated report.
• Fix for deciding the latest version when no version is given for a hosted package.

• Deferred source span loading (fixes out of memory issue).

• Updated the rendering templates of Section.summary.
• Fixed percent calculation in documentation report.

• Fixed string processing in untar error path.

• Implemented new scoring report.
• Improved unpacking of package archives.
• Better path handling on Windows.

• Trust plugins platform declaration when assigning tags.

• Fixed NPE in old Flutter plugin format detection.

• Adds a tag for null safety.
• Adds suggestions for why tags don't apply.
• Command line uses --source=path by default.
• Support platform tagging of old-style flutter plugin declarations.
• Give penalty for old-style flutter plugin declarations.

• Fix: NPE after dartanalyzer exits with a failure.

• Fix: handle new --version output from latest Dart SDK.

• Fix: detect Dart files on Windows
• Fix: unescape double-backslash from files reported by dartanalyzer on Windows.
• Fix: avoid crashing on "file://" imports.

• Fix: when there are no libraries matching lib/*.dart, other libraries outside of lib/src/ will be recognized as top-level libraries.
• Use repository from pubspec.yaml to resolve license URLs.
• Example detection: README.md is de-prioritized, Dart files take precedence.

• InspectOptions.analysisOptionsUri to optionally control which pedantic version (or other package's) ruleset is used for analysis lints.

• Updated tag detection for packages without a primary library.
• Upgraded analyzer to ^0.39.0.
• More dart:* libraries in tag detection: cli, nativewrappers, html_common.
• Limit overall style lint penalties on health score: 25%.

• Don't penalize packages on legacy platform detection results.

• Handle degenerate cases when computing sdk, platform and runtime tags.

• More handling of degenerate cases when computing sdk, platform and runtime tags.

• Allow import of platform:flutter on platform web when calculating tags.
• Fix the finding of primary library.

• Fix the version number of pana

• Compute sdk, platform and runtime tags.

• Upgraded dependencies: analyzer 0.38.2.

• Updated suggestion for not supporting future stable SDKs.

• Upgrade dependencies: analyzer to 0.37

• Support the latest json_annotation.

• Don't penalize outdated dependency when the package's constraint allows it, but a dependent package or SDK restricts it.

• Fix: penalize outdated package constraints only for direct dependencies.

• Penalize package constraints that does not support the latest published versions of their dependencies.

• Recognize .markdown and .mdown files.
• Recognize COPYING and UNLICENSE as license file names (or prefix).
• Accept any extension for license files.

• Fixed the use of pedantic rules following the new versioned pattern.

• Fix: delete local temporary pedantic_analyis_options_[timestamp].g.yaml.

• Upgrade dependencies: analyzer to 0.36

• Penalty for too large readme, changelog or example.

• Penalty for too large pubspec.yaml.

• Display calculated health and maintenance scores when pana is called with --scores.

• Ask for example only for packages with public libraries.

• Deduplicate dartanalyzer output lines.

• Don't block platform classification on hints.

• Apply pedantic rules without referencing package:pedantic in the inspected package's pubspec.yaml.

• Warn about insecure (non-https) image URLs in markdown content (readme, changelog and example).

• Support the latest package:analyzer.

• Link to package layout conventions in example-related suggestions.

• Use package:pedantic as default package analysis ruleset.

• Linear penalties for description.

• Updated suggestion messages.

• Maintenance score penalty for:
  • non-https URLs
  • git dependencies
  • strict parsing errors of pubspec.yaml

• Support --line-length in command-line and in InspectOptions (pass-through to dartfmt).

• Fix pub upgrade parsing.

• Strict SDK constraint status:

  • sdk: any or sdk: is considered missing constraint
  • handling cases without upper bound (sdk: >1.0.0 is rejected by Dart2 latest)

• Analysis options used in code health scoring updated:

  • removed stale options,
  • included latest Flutter-enabled lints,
  • included latest stagehand-enabled lints.

• Upgraded to package:analyzer 0.34.1, which fixed a NPE.

• Validating repository and issue_tracker URLs.

• Code cleanup.

• Reduce the amount of warning+ level log messages when tools fail.

• Handle package with bad pubspec.yaml.

• Reduce the amount of logging when dartfmt fails due to an issue in the package.

• Display Dart SDK warning if package doesn't allow the latest Dart 2.X version.

• Bulk processing and comparison.

• Penalty for description using too many non-ASCII characters.

• Use --dry-run on executing flutter format.

• Retry the external process on downloading and listing packages.

• Use Flutter's internal Dart SDK to run dartanalyzer on Flutter packages.

• Increase the severity of missing SDK constraint.

• Make example/readme.md the first-level example-file candidate.

• Scores values should be consistently in the [0.0-1.0] range.

• Documented how scoring works.

• Estimate health score penalties.

• Increased dartfmt timeout to 5 minutes.

• Store basic stats in the analysis summary.

• Detect example/readme.md (or similar pattern) as an alternative to single .dart example.

• Bugfix: pre-v1 release should be pre-v0.1 instead.

• Bugfix: packages without Dart files failed the health checks.

Breaking changes:

• Named parameters in the following constructors: Summary, DartFileSummary, PkgDependency, CodeProblem.

• Removed per-file and overall Fitness, using a top-level Health report instead. Follows the proposed changes that allow us to clearly communicate the scoring mechanism.

• Removed Penalty and using the simpler to understand score in place of it.

Updates:

• Use flutter format for Flutter packages.

• Support relative local path with --source path.

• Track tool failures and set health score to 0 if there is any.

• Support Dart 2 gold release.

• Remove strong-mode: true check and suggestion.

• Do not check existence of non-external URLs.

• API for external caching of URL existence checks.

• Suggestions for SDK constraint and Dart 2 compatibility.

• Updated report on dartanalyzer suggestions.

• Less verbose logging.

• Updated platform classification:

  • Library conflict rule is moved to the end of the evaluation.
  • Top file-related suggestions are directly exposed.
  • The bulk summary suggestion is more compact.

• Updated suggestion messages.

• Export libraries used by pub site.

• Update minimum SDK to 2.0.0-dev.42.0

  • The SDK was effectively restricted to at least this version due to other dependencies.

• Better expose platform conflict reasons.

• Support changing part of the analysis result.

• Fix dartdoc timeout when using pub global run.

• dartdoc processing: do not exclude packages by default, as dartdoc 0.19 handles SDK links.

• expose getAgeSuggestion method for pub site

• Update analyzer dependency to ^0.32.0.

• Upgrade CI to dev.54 and fix new deprecation warnings.

• Bugfix: do not initialize dartdocSuccessful with a value.

• Support --flutter-sdk in the pana binary.

Breaking changes:

• DartSdk, FlutterSdk and PubEnvironment is replaced with ToolEnvironment.

• ToolEnvironment.runAnalyzer returns the text output of the process.

• Consolidating options in InspectOptions, changing PackageAnalyzer APIs.

• Move all output-related data structure to src/model.dart:

  • CodeProblem.parse -> parseCodeProblem
  • Maintenance.getMaintenanceScore -> getMaintenanceScore
  • PkgResolution.create -> createPkgResolution

• Move all runtime/version info into PanaRuntimeInfo (and use it in Summary).

• Removed Fitness.suggestions (moved it to DartFileSummary)

Updates:

• Run dartdoc (optional) and report if it was not able to complete successfully.

• Added a top-level models.dart library exposing several of the data classes.

• Check homepage and documentation properties to point to an existing and external web page.

• --verbose command-line and Verbosity option to control the details in the analysis output.

• Enable Dart 2 Preview in analyzer options (including non-Flutter packages).

• Change platform classification of dart:isolate: no longer available on web.

• Treat environment: keys as dependent SDKs (e.g. flutter).

• Use LibraryElement.hasExtUri to detect dart-ext: imports.

• Detailed suggestion messages when package has conflicting platforms.

• Enable Dart 2 Preview in Flutter analyzer options.