Swift Open-Source Supply-Chain Review

Swift repository pattern findings, supply-chain review signals and scan coverage.

Report generated: 2026-11-14 17:29 UTC.

Primary repository language: Swift. 103 successful scans; 103 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.

LanguageScanned reposRepos scoredMean index / 100Schema / engine / scoring
Swift1031031.421.0.0 / 2.0.0 / heuristic-density-v1

Repository evidence

RepositorySupply-chain index / 100Schema / engine / scoringLines scannedScan date
vapor/vapor30.761.0.0 / 2.0.0 / heuristic-density-v145,9722026-10-31
SnapKit/SnapKit20.641.0.0 / 2.0.0 / heuristic-density-v14,7592026-10-31
kickstarter/ios-oss11.291.0.0 / 2.0.0 / heuristic-density-v1298,9082026-10-31
krahets/hello-algo10.901.0.0 / 2.0.0 / heuristic-density-v1644,6412026-10-31
altic-dev/FluidVoice7.071.0.0 / 2.0.0 / heuristic-density-v1328,8872026-10-31
manaflow-ai/cmux4.831.0.0 / 2.0.0 / heuristic-density-v14,695,7062026-10-31
BarutSRB/OmniWM4.671.0.0 / 2.0.0 / heuristic-density-v1703,0722026-10-31
Sjj1024/PakePlus-iOS4.111.0.0 / 2.0.0 / heuristic-density-v12,3802026-10-31
EhPanda-Team/EhPanda4.011.0.0 / 2.0.0 / heuristic-density-v136,6732026-10-31
SwifterSwift/SwifterSwift3.501.0.0 / 2.0.0 / heuristic-density-v130,2112026-10-31
TelegramMessenger/Telegram-iOS3.501.0.0 / 2.0.0 / heuristic-density-v16,602,0172026-10-31
vorssaint/vorssaint-utils2.751.0.0 / 2.0.0 / heuristic-density-v1438,6672026-10-31
slopus/happy2.601.0.0 / 2.0.0 / heuristic-density-v1730,1082026-10-31
facebook/idb2.391.0.0 / 2.0.0 / heuristic-density-v1310,4552026-10-31
tisfeng/Easydict2.101.0.0 / 2.0.0 / heuristic-density-v1215,1682026-10-31
swiftlang/swift-package-manager2.071.0.0 / 2.0.0 / heuristic-density-v1446,3472026-10-31
tw93/MiaoYan1.961.0.0 / 2.0.0 / heuristic-density-v161,8162026-10-31
TheBoredTeam/boring.notch1.901.0.0 / 2.0.0 / heuristic-density-v124,7632026-10-31
DebugSwift/DebugSwift1.881.0.0 / 2.0.0 / heuristic-density-v184,1812026-10-31
steipete/CodexBar1.781.0.0 / 2.0.0 / heuristic-density-v1976,6812026-10-31
CodeEditApp/CodeEdit1.651.0.0 / 2.0.0 / heuristic-density-v166,0072026-10-31
mozilla-mobile/firefox-ios1.431.0.0 / 2.0.0 / heuristic-density-v1645,9212026-10-31
vsouza/awesome-ios1.361.0.0 / 2.0.0 / heuristic-density-v13,6532026-10-31
wordpress-mobile/WordPress-iOS1.361.0.0 / 2.0.0 / heuristic-density-v1580,3762026-10-31
gnachman/iTerm21.261.0.0 / 2.0.0 / heuristic-density-v11,417,8072026-10-31

Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.

Read definitions and methodology