Changes in version 4.1.3 (2026-09-22) New Features - fix CRAN Note by moving tools to Imports - add generate_security_vulnerabilities extraction function - add OSV data base - Defined ecosystems to security vulnerabilities vignette Changes in version 4.1.2 (2026-07-16) New Features - fix CRAN issue with test-generate_html_report - increase test coverage for test-assess_pkg, test-generate_html_report, - test-get_session_dependencies, test-write_summary_report - add frugal metrics extraction function Changes in version 4.1.1 (2026-07-06) New Features - add security vulnerabilities check feature - update URL for API keys in Pubmed_data vignette - add add source control and bug URL to risk-definition.json - fix CRAN issue with test-get_github_data.R - add CRAN skips to test-check_suggested_exp_funcs - add frugal metrics extraction function Changes in version 4.1.0 (2026-06-11) New Features - add CRAN-safe test skip helpers skip_if_repo_unavailable() and skip_if_test_data_missing() to fix "package_installed not found" failures (#54) - refactor create_traceability_matrix() to join on a normalized .join_key for reliable coverage-to-function matching across path formats (#52) Changes in version 4.0.0 New Features - add test.assessr dependency to process unit test coverage - remove unit test coverage code, docs, tests and dependencies - reorganisation of documentation by topic - check R folder recursively - check for NEWS in different locations - check different hosting platforms for repos - add and update average_issue_close_time - refactor create_traceability_matrix - refactor check_suggested_exp_funcs - refactor assess_exports - update modify_description unpack_tarball - add skip_if_repo_unavailable to tests - update assess_size_codebase to handle no R folder - update tests to include licenses Changes in version 3.1.1 (2026-04-08) New Features - patch release includes risk_assess_pkg() and assess_pkg_r_package() feature to retrieve latest package versions Changes in version 3.1.0 (2026-03-25) New Features - improved assessment of documentation and examples - summary decision report for validation process - refactor fetching source files - updated stringr and kableExtra versions Changes in version 3.0.1 (2025-12-01) New Features - this version fixes issues found in the CRAN check Changes in version 3.0.0 (2025-11-28) New Features - fine-grained traceability matrices: - new traceability matrices (tms) in generate_html_report: - tms showing functions by test coverage e.g. High Risk, Medium Risk, Low Risk - tms showing function type e.g. Defunct, Imported, Re-exported, Experimental - Test coverage made optional - data retrieval from different sources: - more extensive data retrieval from CRAN, Bioconductor and GitHub including: - retrieval of the URLs for packages - available package versions - popularity metrics e.g. monthly and cumulative CRAN/Bioconductor downloads and git commits - number of citation data from PubMed e.g. article counts by year - define your own risk rules - Add risk analysis that identify risks (Low, Medium, High) based on risk.assessr metric values and thresholds - create your own rules or use the default rules to suit your R package validation requirements - test configuration checks - identify testing framework/s such as testthat and testit - count number of tests and golden test files - dependency tree - Create and display data about your package and its dependencies including package versions - generate report path - generate_html_report will create a default report path if the user does not specify one - retrieve readme badge - list_badges will fetch the list of badge in the readme and return key-value - test cleanup - tests that use tar files located in inst/test-data have improved clean up using withr::defer and unlink change generate_html_report and test-generate_html_report to make them CRAN compliant - vignette build - vignettes that access CRAN set to eval=FALSE to aid in detritus cleanup Changes in version 2.0.0 (2025-07-10) New Features - Author Metadata Expansion: - Added $author section including maintainer, funder, and a full list of contributing authors with ORCID IDs and roles. - Hosting Metadata Extraction: - New $host section includes GitHub and CRAN, Bioconductor and internal package - GitHub Repository: - Added $github_data with: - created_at - stars - forks - recent_commits_count - CRAN download: - Added $download with: - total_download - last_month_download - Package version: - Added $version_info with: - available_version - last_version - Bioconductor compatibility: - assess_pkg_r_package() function now fetches bioconductor source package - renv.lock processing: - risk_assess_pkg_lock_files() function now processes renv.lock and pak.lock files - Suggested Dependency Analysis: - Introduced $suggested_deps output as a tibble with source, suggested_function, targeted_package, and contextual message. - Traceability Matrix: - now processes and reports on regular, S3, and S4 functions. - Package validation report: - HTML report creation with interactive features for package validation Improvements - Structured Dependency Extraction: - Dependencies are now returned as structured nested lists under $dependencies$imports and $dependencies$suggests, replacing the previous flat string format. - Each suggested package now includes installed version from getsession() - Added $license_name for readable license detection, e.g., "MIT + file LICENSE" - Added $rev_deps returning list reverse dependency - risk_assess_pkg() now includes an optional parameter "path" for locally stored package - remove httr2 and tibble dependencies Changes in version 1.0.0 First package version inspired by riskmetric. Package features include: - Run CMD, test coverage - Traceability Matrix - Metadata (Date, system, OS) - Quality extraction metrics (documentation, license, examples, vignettes) - assess_pkg_r_package() function fetches source code from CRAN