
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
A pre-commit hook that sorts your xcodeproj file.
This repo provides a ready to use pre-commit hook for automatically sorting your Xcode project. The hook looks for files ending in .pbxproj that have been modified and sorts their project group hierarchy automatically using the Xcodeproj gem. The effect is that the sort leaves your project file modified if it's not sorted, so that pre-commit won't allow the unsorted file to go through.
If you haven't set up pre-commit, check out pre-commit's installation docs first.
Add the following to your .pre-commit-config.yaml:
- repo: git://github.com/noahsark769/xcodeproj-sort-pre-commit-hook
sha: v1.0.2
hooks:
- id: xcodeproj-sort
args: [--groups-position=above]
Then, run:
pre-commit install
Use the --groups-position option to specify the position of groups in the sort:
above: Positions groups above objects in the sortbelow: Positions groups below objects in the sortThe default is to interleave groups and objects in the sort.
The code runs in a rubygem which is build by pre-commit. To run a sort manually outside of pre-commit, install the gem locally:
gem install xcodeproj-sort
Then, run the gem with the project file as an argument:
xcodeproj-sort MyProject.xcodeproj/project.pbxproj
I use this in the development of Trestle, but your mileage might vary. If you notice a bug or have a feature request, please open a github issue or submit a pull request. It's best to open issues first so that work isn't duplicated.
After closing the repo, you can run make install to build the gem and install locally, after which xcodeproj-sort should be in your path.
FAQs
Unknown package
We found that xcodeproj-sort demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.