Swift Package Audit v1.1.0: added licence check support
I have released Swift Package Audit v1.1.0, a command-line tool for auditing Swift package dependencies in Xcode and Swift Package Manager projects.
Swift Package Audit scans projects for dependency health issues such as unresolved package references, branch or revision dependencies, exact version pins, stale resolved files, and optional remote version checks. It can output human-readable reports, JSON, Markdown, and PR comments for CI workflows.
## New in v1.1.0
This release adds optional package license checks:
swift-package-audit scan --licenses
License checks use GitHub repository license metadata for packages in `Package.resolved`, then report detected licenses in text, Markdown, PR comment, and JSON output.
Projects can also configure license policy in `SwiftPackageAudit.yml`:
licenses:
allow:
- MIT
- Apache-2.0
deny:
- AGPL-3.0-only
requireKnownLicense: false
The scan can now emit diagnostics for denied licenses, unknown licenses, and failed license lookups. License checks are opt-in because they make network requests.
Release: Release v1.1.0 · crleonard/swift-package-audit · GitHub