Support for Secure API Key Management
- CRAN checks, method
Method
Checks and health
CRAN runs every current package through
R CMD checkon a set of machines and publishes a result for each one. The health shown on a package page comes from these results alone.- Problems
- Notes alone never count against a package, but a warning, an error or a failure on any platform is a problem. Open CRAN deadlines are a fact of their own, shown as a clock after the mark, so the mark always says what the checks found.
- Checks only
- Health reflects CRAN's check results and nothing else. Even a package with no tests, no coverage or no recent release can have every platform OK.
- Once a day
- Results are collected once a day from files CRAN publishes. Each platform is one machine set-up, named by its R version, operating system, architecture and compiler, such as r-devel-linux-x86_64-fedora-clang.
- Platforms counted
- The 13 in 3 of 13 is the number of platform rows CRAN published for that package on the day of collection. The set of machines changes over time, so the number is not fixed, and a package missing from a platform counts as neither passing nor failing there.
- All OK13 platforms
- CRAN 30-day downloads, method
- 699−13% down on the 30 days before, the worse direction
- Dependent packages, method
Method
Reverse dependencies
Dependent packages are other packages that list this one under
Depends,ImportsorLinkingToin theirDESCRIPTIONfile. Those fields list the packages a package needs to install, so dependents break if this one is archived or broken.- As declared
- The counts follow the declarations as written, not whether a package uses the other one when it runs.
- Suggests apart
- Packages that list this one only under
Suggestsinstall and run without it, and use it for tests, examples or an optional feature. They are counted as Suggested by, never among the dependents, and a package that also lists it under one of the three fields is a dependent and is not counted again. - Zero
- Zero dependents means no current CRAN package declares a need for this one, though some may suggest it. On 28 Oct 2026, 19,572 of the 25,583 current CRAN packages had no dependent package.
- 13 more indirectly
- Test coverage, method
Method
Test coverage
Test coverage is measured by downloading each CRAN package's current source file, installing its dependencies, building it and running its tests under covr.
- Almost half of CRAN has no tests to run
- Only CRAN packages are measured. Many have no percentage, most often because the package has no tests, and that blank is a recorded outcome, not missing data.
- NOT_CRAN
- Tests run with NOT_CRAN=true, so tests that skip themselves on CRAN run here, and the figure can differ from what CRAN's own checks see.
- Current version only
- Only the current version is measured, and a new version on CRAN is measured again. Older rows are kept but never filled in later. This is one package's run.
- Never 0%
- On a package page three states stay apart: measured, no tests, and not measured. Neither of the last two is ever shown as 0%.
- 0%of lines run by tests
- Advisories, method
Method
Security advisories
Advisories come from the R Consortium advisory database, a community record of security problems in R packages, as OSV publishes it.
- The copy
- The record is read once a day. The data is published under the Apache License 2.0 and is credited on the advisories list.
- Box under the name
- Under the package's name, a box names any advisory that affects the current release, with its fix or that there is none.
- Ranges
- Advisories state ranges, such as from 0.9.12 up to but not including 1.8.8. Each range is checked against every version CRAN has published, using the version rules R itself uses, so a release that came out after the advisory was written is still caught by its range.
- Not the package
- The rating is for the library flaw itself, not for how exposed the R package is, and it is never added up into a figure for the package.
- None known
About
Method, About Method Licence figures come from the Licences
License field of each package's DESCRIPTION file, read the way R itself reads it. No licence file is opened.tools::analyze_license() and R's own licence database, as CRAN's checks read it.| is read, so one string can offer two families.
Secure handling of API keys can be difficult. This package provides secure convenience functions for entering / handling API keys and opening connections via inversion of control on those keys. Works seamlessly between production and developer environments.
- Maintainer
- Shawn Garbett
- Licence
- GPL-3
- Latest release
- 2 Jun 2025
- First release
- 7 Nov 2024
More details
- Releases
- 3
- Needs compilation
- No
- Needs R
- >= 4.1.0
- RoxygenNote
- 7.3.2
Subjects (1) Method, SubjectsMethod
Subjects and collections
Subjects are the site's own grouping of CRAN packages, found by clustering. Collections are sets of packages that communities declare, such as the tidyverse.
- Subjects
- Subjects are found by clustering the words of current CRAN packages and the packages they use. No one edits them by hand.
- Collections
- Collections are sets that communities declare, through a package that installs the set or an organization on GitHub. The site finds them by rules.
- Who made each
- Subjects are marked Site and collections Community. Subjects, collections and task views are never mixed in one list.
- The day of the data
- Subjects and collections were last worked out on 22 Oct 2026.
Cite
Package
Run in R for the authors' preferred citation:
citation("shelter")Garbett, S., Beck, C., Nutter, B., Obregon, S., & Wu, H. (2025). shelter: Support for Secure API Key Management (Version 0.2.1) [Computer software]. https://doi.org/10.32614/CRAN.package.shelter
About
This package has no citation file, so citation() returns this entry built from DESCRIPTION.
R Observatory
For a number measured here: a download total, a coverage figure, an archival date.
Balamuta, J. J. (2026). R Observatory: Metrics for shelter version 0.2.1 [Data set]. HJJB, LLC. Data release v2026-10-28. https://doi.org/10.5281/zenodo.21843040
About
From data release v2026-10-28, which the citation names so these numbers can be found later.
Health
All 13 check platforms pass.
r-devel-linux-x86_64-debian-clangThe unreleased R on Linux, x86_64, debian-clang
OK
- Version checked
- 0.2.1
- Time taken
- 26 s
r-devel-linux-x86_64-debian-gccThe unreleased R on Linux, x86_64, debian-gcc
OK
- Version checked
- 0.2.1
- Time taken
- 22 s
r-devel-linux-x86_64-fedora-clangThe unreleased R on Linux, x86_64, fedora-clang
OK
- Version checked
- 0.2.1
- Time taken
- 20 s
r-devel-linux-x86_64-fedora-gccThe unreleased R on Linux, x86_64, fedora-gcc
OK
- Version checked
- 0.2.1
- Time taken
- 17 s
r-devel-windows-x86_64The unreleased R on Windows, x86_64
OK
- Version checked
- 0.2.1
- Time taken
- 57 s
r-oldrel-macos-arm64The previous release of R on macOS, arm64
OK
- Version checked
- 0.2.1
r-oldrel-macos-x86_64The previous release of R on macOS, x86_64
OK
- Version checked
- 0.2.1
- Time taken
- 30 s
r-oldrel-windows-x86_64The previous release of R on Windows, x86_64
OK
- Version checked
- 0.2.1
- Time taken
- 58 s
r-patched-linux-x86_64The patched release of R on Linux, x86_64
OK
- Version checked
- 0.2.1
- Time taken
- 24 s
r-release-linux-x86_64The current release of R on Linux, x86_64
OK
- Version checked
- 0.2.1
- Time taken
- 24 s
r-release-macos-arm64The current release of R on macOS, arm64
OK
- Version checked
- 0.2.1
- Time taken
- 11 s
r-release-macos-x86_64The current release of R on macOS, x86_64
OK
- Version checked
- 0.2.1
- Time taken
- 32 s
r-release-windows-x86_64The current release of R on Windows, x86_64
OK
- Version checked
- 0.2.1
- Time taken
- 58 s
- 13 OK
Over time
No change since 4 Aug 2026
As a list (3)
| Changed | Worst status | OK | Notes | Warnings | Errors |
|---|---|---|---|---|---|
| 4 Aug 2026 | OK | 13 | 0 | 0 | 0 |
| 1 Aug 2026 | Note | 12 | 1 | 0 | 0 |
| 10 Mar 2026 | OK | 14 | 0 | 0 | 0 |
Since March 2026
Downloads
Method, Downloads Method Download figures count requests logged by each distribution channel. They are not counts of installs or of users, because each channel publishes its own totals and this site reads them.Downloads
- Total downloads in the last 30 days
- 706−12.5% down on the 30 days before, the worse directionIt is the sum of 2 channels: CRAN and r2u.
CRAN rank
4,519 of 26,530
CRAN
699 downloads in the last 30 days
- Rank
- 4,519 of 26,530
- Change
- −13% down on the 30 days before, the worse direction
It is in the total. Take it out
r2u
7 downloads in the last 30 days
- Rank
- 7,875 of 30,526
- Change
- +75% up on the 30 days before, the better direction
It is in the total. Take it out
The total is 706 downloads in the last 30 days. It is the sum of 2 channels: CRAN and r2u.
Over time
Dependencies
- Needs
- 6
- Dependent packages
- 1
- Suggested by
- 0
Needs (6)
Optional extras (4)
Dependent packages (1)
| Package | Title | Downloads in 30 days |
|---|---|---|
| redcapAPI | Interface to 'REDCap' | 1,228 |
Code
Method, Code Method Code metrics come from reading the released source of each package version. The package is never installed, loaded or run.Code metrics
README, vignettes, a NEWS file and the shares read from its help pages. Files kept only in the repository, such as a pkgdown configuration or CI files, are read by the repository scan instead.
- Functions
- 32
- Public exports
- 13
- Lines of R code
- 3,141
- Median complexity
- 2
Functions (32)
Size and composition
Lines by kind (4,326)
| Kind | Lines | Share |
|---|---|---|
| R code | 3,141 | 73% |
| Tests | 748 | 17% |
| Documentation | 437 | 10% |
Lines by language
| Language | Lines | Share |
|---|---|---|
| R | 3,889 | 90% |
| Rd | 437 | 10% |
Languages are counted from file extensions.
- Files
- 33
- R functions
- 32
Complexity
- Median
- 2
- Mean
- 3.59
- Highest
- 16
- Median lines per function
- 11
About complexity
Cyclomatic complexity counts the independent paths through a function: 1 is a straight line, higher is harder to test. R functions only.
Call graph figures
- R functions
- 32
- Calls
- 51
- Unconnected
- 1
- Groups
- 1
Growth (3 releases)
Release changes
Tests
The tests ran and coverage was measured.
- Lines run by tests
- 0%
- Expressions run by tests
- 0%
- Test cases
- 66
- Exports named in tests
- 100%
Coverage by file (6)
Coverage run
- Lines counted
- 359
- Lines the tests ran
- 0
- Tests passed
- Yes
- Measured with
- covr 3.6.5 on R 4.6.1
Test suite
- Has tests
- Yes
- Test frameworks
- testthat
- Test cases
- 66
- Lines of tests
- 748
- Test lines per line of code
- 0.24
Documentation
- Exports documented
- 100%
- Arguments documented
- 100%
- Return value documented
- 100%
- Help pages with examples
- 92.9%
- Examples run in checks
- 7.7%
Other documentation
- README
- Yes, 748 words
- Release notes file
- Yes
- Help pages
- 14
- Lines of documentation
- 437
People
Method, People Method People on the site are the names packages give them in their Author and maintainer identity
DESCRIPTION files: authors from the author list, and the maintainer from the Maintainer field. Spellings of one name become one person only where the rules below allow it, and when in doubt the rules keep people apart.
Repository
Method, figures by host Method Repository signals are the figures read from the source repository a package links to: stars, forks, issues, commits, releases and the time issues take to close. They are read from GitHub, GitLab, Codeberg and Bitbucket.Repository signals
URL and BugReports fields of its DESCRIPTION file. Read-only mirrors, the cran and bioc accounts on GitHub and git.bioconductor.org, are left out.
vubiostat / shelter on github.com
- Stars
- 0
- Forks
- 1
- Open issues
- 1
- Last commit
- 19 Apr 2026
Activity
- Commits
- 84
- Open pull requests
- 0
- Tagged releases
- 4
- Latest tagged release
- v0.2.1, 4 Jun 2025
- In development
- Default branch at 1.0.0, ahead of CRAN 0.2.1 (checked 2026-10-25)
- Issues closed in
- 13 days (median)
- Pull requests closed in
- 1 day (median)
- Pull requests merged
- 100%
- Created
- 23 Oct 2024
- Licence file reads as
- –
Development practices (2)
| Kind | Found |
|---|---|
| Continuous integration | GitHub Actions, R CMD check workflow The R CMD check workflow runs on Linux, macOS and Windows, and on R-devel |
Method, repository practices Method Beta Each week a scan of the public source repository a package links to looks for the tools a maintainer has set up, and the Repository section lists the findings. Repositories on GitHub and GitLab are scanned.Repository practices
R CMD build reads .Rbuildignore and leaves out files used only in development, such as .github/, .lintr, renv/, a Dockerfile and cran-comments.md, so the released source file holds almost none of them. The repository is the one place these files stay visible.
History
Method, History Method Archived is built from CRAN's archive records, its list of check deadlines and Bioconductor's package records. Every figure is counted to 28 Oct 2026, the day the data was read.Packages leaving