R Observatory: Metrics for oysteR version 0.1.4

Balamuta, James Joseph

doi:10.5281/zenodo.21843040

oysteR

0.1.4Package record

Scans R Projects for Vulnerable Third Party Dependencies

0packages dependsuggested by 4

12.5Kdownloads / year

58.4%test coverage

13/13flavors OK

Overview

About

Maintained by Colin GillespieCRAN page ↗GitHub ↗Issues ↗

Collects a list of your third party R packages, and scans them with the 'OSS' Index provided by 'Sonatype', reporting back on any vulnerabilities that are found in the third party packages you use.

Changes in 0.1.4

bug: Incorrectly states how many packages were found in the database (see #62)
feat: Pass tokens as arguments
chore: Formatting via air
chore: linting

From NEWS.md in the release

Install

R (CRAN)pak (dev)Ubuntu (r2u)Fedora (COPR)openSUSE (OBS)

install.packages("oysteR", repos = "https://cloud.r-project.org/")

Installs the current CRAN release. Prebuilt binaries on Windows and macOS.

if (!requireNamespace("pak", quietly = TRUE))
  install.packages("pak", repos = "https://cloud.r-project.org/")
pak::pak("sonatype-nexus-community/oysteR")

Development version from sonatype-nexus-community/oysteR. Installs pak first if it is not already available.

Release

# enable cranapt (r2u) if it is not already set up, then install
grep -rqs r2u.stat.illinois.edu /etc/apt/sources.list /etc/apt/sources.list.d/ \
  || curl -fsSL https://raw.githubusercontent.com/eddelbuettel/r2u/master/inst/scripts/add_cranapt_noble.sh | sudo bash
sudo apt install -y r-cran-oyster

Fast Ubuntu binaries via r2u (no compilation). The cranapt setup runs once and is skipped when it is already enabled. We list this channel from recorded r2u download activity rather than from a live index of the repository, so treat it as last known rather than guaranteed.

bspm (used by r2u) also needs make: sudo apt install make

# enable the iucar/cran COPR if it is not already present, then install
ls /etc/yum.repos.d/*iucar*cran*.repo >/dev/null 2>&1 \
  || sudo dnf copr enable -y iucar/cran
sudo dnf install -y R-CRAN-oysteR

RPMs from the iucar/cran COPR, rebuilt from CRAN.

For install.packages() integration in R, also: sudo dnf install R-CoprManager

# add the autoCRAN OBS repo (Tumbleweed) if it is missing, then install
zypper -q lr | grep -qi autoCRAN \
  || sudo zypper addrepo https://download.opensuse.org/repositories/devel:/languages:/R:/autoCRAN/openSUSE_Tumbleweed/devel:languages:R:autoCRAN.repo
sudo zypper install -y R-oysteR

RPMs auto-built from CRAN on openSUSE OBS (Tumbleweed). We list this channel from recorded autoCRAN download activity rather than from a live index of the repository, so treat it as last known rather than guaranteed.

Health

CRAN checks

13OK

Additional issues

donttest

CRAN check page ↗

Slowest check: 1.7 min · r-oldrel-macos-x86_64

Status changes

OK13 OK2026-08-05
NOTE12 OK, 1 NOTE2026-08-01
OK14 OK2026-03-10

Advisories

none known

How this is measured·How advisories are found

Documentation

Documentation signals are not tracked yet for this package.

Vignettes (1)

Reporting Security Vulnerabilities

How these are measured

Downloads

12.5K

CRAN downloads in the past year

Rank #2,930 · ~34/day · ~1K/mo

oysteR Releases R versions

Daily download trend is not available in this view yet.

1.9K30 days

4.8K90 days

12.5K1 year

Compare downloads with other packages →

Also on262 r2u7 autocran783 conda_forge

How downloads are counted

Repository

sonatype-nexus-community/oyster ↗Organization: sonatype-nexus-community

43Stars

10Forks

15Open issues

4Open PRs

0Releases

104Commits

9Commit identities

hacktoberfest

License file reads as Apache-2.0 · 104 commits · Last activity 2025-10-23 · 0% stars, 30d

Responsiveness

How these are sampled

PRs merged (all time): 79%
Median days to close, 50 most recently updated closed issues: 12
Median days to close, 50 most recently updated closed PRs: 2

How these are measured

PracticesBeta

16 development-tooling and community-health practices detected across 5 families in the upstream repository

Checks run against github.com/sonatype-nexus-community/oyster on 2026-10-11.

Continuous integration (3)

GitHub ActionsR CMD check workflowCircleCI

The R CMD check workflow runs on Linux, macOS and Windows, and on R-devel

Governance and community (5)

Code of conduct (inherited from sonatype-nexus-community)Contributing guideIssue templatesPR templateCODEOWNERS

Docs source (4)

README.Rmdpkgdown

GitHub Pages site last deployed 2021-05-18 · The repository has a site deploy workflow

Coverage (1)

Coverage reporting (Codecov)

Show all practicesHide 1 practice

Lint, format, editor (3)

lintrAirRStudio project

How this is detected·Detection ruleset v3 (2026-09-26)

AI coding toolsBeta

An outside contributor's pull request to this repository was written with an AI coding tool.

From outside contributors

Claude Code
Pull requests: 2 from outside contributors, first on 2026-01-22, 1 from forks

How this is detected·Detection ruleset v4 (updated 2026-09-27)

Dependencies

Declared dependencies

17 external dependencies (excludes base and recommended)

Installing oysteR adds 29 packages (20 with compiled code, 21 MB of source tarballs). Heaviest: stringi 11 MB, openssl 1.1 MB, jsonlite 1.0 MB.

Depends (1)

R >= 4.0.0

Imports (13)

cli dplyr glue httr jsonlite purrr rjson rlang stringr tibble tidyrutilsyaml

LinkingTo (0)

none

Suggests (5)

covr httptest knitr rmarkdown testthat

Enhances (0)

none

Dependency license breakdown →

Reverse dependencies

0direct

0indirect

Suggested by 4

Suggests, most downloaded first

pslr punycoder rurl pagerankr

How these are counted

Code & Tests

People & History

People (6)

Colin Gillespie

Author, Maintainer since 0.0.3 (2020)

Brittany Belle

Author

Jeffry Hesse

Author

Josiah Parry

Author · added in 0.1.0

Dan Rollo

Author

Sonatype

Copyright holder

Releases (4)

R
R 4.6.0 released · 2026-04-24
0.1.4Latest
record
2025-10-09 · current release · diff ↗ ·
removed 1 export
audit_deps

added 1 export
audit_conda
R
R 4.5.0 released · 2025-04-11
R
R 4.4.0 released · 2024-04-24
R
R 4.3.0 released · 2023-04-21
R
R 4.2.0 released · 2022-04-22
R
R 4.1.0 released · 2021-05-18
0.1.1
record
2021-01-10 · diff ↗
0.1.0
record
2020-12-17 · diff ↗ ·
added 7 exports
audit, audit_description, audit_installed_r_pkgs, audit_renv_lock, audit_req_txt, expect_secure, remove_cache
0.0.3
record
2020-07-02
R
R 4.0.0 released · 2020-04-24

Package metadata

First published: 2020-07-02
Total releases: 4 / 6 yrs
License: Apache License 2.0 | file LICENSE OSI
Download size: 343 KB

Cite

Cite this package

Run in R for the authors' preferred citation:

citation("oysteR")

Format

Gillespie, C., Sonatype, Belle, B., Hesse, J., Parry, J., & Rollo, D. (2025). oysteR: Scans R Projects for Vulnerable Third Party Dependencies (Version 0.1.4) [Computer software]. https://doi.org/10.32614/CRAN.package.oysteR

This is what citation() produces when a package has no citation file of its own. If it prints something else, use that.

Cite the R Observatory

For a number measured here: a download total, a coverage figure, an archival date.

Format

APA

Balamuta, J. J. (2026). R Observatory: Metrics for oysteR version 0.1.4 [Data set]. HJJB, LLC. Data release v2026-10-19. https://doi.org/10.5281/zenodo.21843040

From data release v2026-10-19, which the citation names so these numbers can be found later. More on citing and the projects behind them.

Report a problem with this page →