Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
CocoaPods manages dependencies for your Xcode projects.
You specify the dependencies for your project in a simple text file: your Podfile
.
CocoaPods recursively resolves dependencies between libraries, fetches
source code for all dependencies, and creates and maintains an Xcode
workspace to build your project. The latest released Xcode versions and the
prior version are supported.
Installing and updating CocoaPods is very easy. Don't miss the Installation guide and the Getting Started guide.
CocoaPods aims to improve the engagement with, and discoverability of, third party open-source Cocoa libraries. These project goals influence and drive the design of CocoaPods:
Podspec
standard.git
,
svn
, mercurial
, bazaar
, and various types of archives downloaded over HTTP.)Lovingly sponsored by a collection of companies, see the footer of CocoaPods.org for an up-to-date list.
All CocoaPods development happens on GitHub. Contributions make for good karma and we welcome new contributors with joy. We take contributors seriously, and thus have a contributor code of conduct.
Link | Description |
---|---|
CocoaPods.org | Homepage and search for Pods. |
@CocoaPods | Follow CocoaPods on Twitter to stay up to date. |
Blog | The CocoaPods blog. |
Mailing List | Feel free to ask any kind of question. |
Guides | Everything you want to know about CocoaPods. |
Changelog | See the changes introduced in each CocoaPods version. |
New Pods RSS | Don't miss any new Pods. |
Code of Conduct | Find out the standards we hold ourselves to. |
CocoaPods is composed of the following projects:
Status | Project | Description | Info |
---|---|---|---|
CocoaPods | The CocoaPods command line tool. | guides | |
CocoaPods Core | Support for working with specifications and podfiles. | docs | |
CocoaPods Downloader | Downloaders for various source types. | docs | |
Xcodeproj | Create and modify Xcode projects from Ruby. | docs | |
CLAide | A small command-line interface framework. | docs | |
Molinillo | A powerful generic dependency resolver. | docs | |
Master Repo | Master repository of specifications. | guides |
FAQs
Unknown package
We found that cocoapods demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.