dart-package-maintenance — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited dart-package-maintenance (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Guidelines for maintaining Dart packages in alignment with Dart team best practices.
To find maintenance tasks or inconsistencies:
Ensure the latest version in CHANGELOG.md matches pubspec.yaml:
CHANGELOG.md with the version: field inpubspec.yaml.
0.major.minor+patch.1.0.0 as soon as the package is stable.CHANGELOG.md orpubspec.yaml, ALWAYS check the currently released version (e.g., via git tag or pub.dev).
that corresponds to a released tag.
pubspec.yamlmatches a released tag, increment the version (e.g., usually to -wip) and create a new section in CHANGELOG.md.
CHANGELOG.md header must match the newpubspec.yaml version.
(e.g., 2.0.0-wip, 0.5.0-wip).
(e.g., 1.1.0-wip, 0.4.5-wip).
1.0.1-wip).CHANGELOG.md should focus on changesvisible to or impacting the end-user (e.g., new features, bug fixes, breaking changes).
changes, or other modifications that do not affect the package's behavior or API for the user.
pubspec.yaml and CHANGELOG.md with a -wip suffix (e.g., 1.1.0-wip).
downstream breakage.
-wip suffix from pubspec.yaml andCHANGELOG.md in a dedicated pull request.
dart pub publish (or flutter pub publish) and resolveall warnings and errors.
v1.2.3package_name-v1.2.3git tag v1.2.3 && git push --tagsupon merging.
main into the PR branch rather thanrebasing to resolve conflicts. This preserves the review history and comments.
gh pr checkout <number> to inspect changeslocally in your IDE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.