DESCRIPTION

Package: pkgaudit
Title: Static Analysis Security Testing (SAST) for R Packages
Version: 0.4.0
Authors@R:
    person("Tyler", "Smith", , "tylerjssmith@gmail.com", role = c("aut", "cre"),
           comment = c(ORCID = "0000-0003-4692-2206"))
Description: A static analysis tool that flags security-relevant files and code
  in R source packages for human review without executing anything it scans.
  Models package lifecycle execution semantics -- it reports not just what a
  package does, but when it runs, so code that executes on install or load is
  distinguishable from code that runs only when called. Reads every surface a
  package can execute, including 'configure' scripts, help-file macros, and
  vignettes, and states what it could not read, so a clean result can be checked
  rather than trusted. Detection rules are data, shipped in a versioned and
  hash-verified 'SQLite' database.
License: Apache License (>= 2)
URL: https://github.com/tylerjssmith/pkgaudit,
    https://tylerjssmith.github.io/pkgaudit/
BugReports: https://github.com/tylerjssmith/pkgaudit/issues
Encoding: UTF-8
Language: en-US
Roxygen: list(markdown = TRUE)
Depends:
    R (>= 4.1)
Imports:
    DBI,
    digest,
    RSQLite,
    stats,
    tools,
    utils,
    xml2,
    xmlparsedata
Suggests:
    covr,
    jsonlite,
    knitr,
    rmarkdown,
    testthat (>= 3.0.0),
    yaml
VignetteBuilder: knitr
Config/testthat/edition: 3
Config/roxygen2/version: 8.1.0
Config/Needs/website: pkgdown
Config/Needs/coverage: covr