fsprojects/SwaggerProvider

SwaggerProvider is an F\# type provider that generates strongly-typed client code from OpenAPI schemas at compile time. It separates design-time schema processing from runtime HTTP execution, offering SSRF protection, comprehensive error handling, and support for modern .NET types. The system includes a dedicated runtime library for making API calls and a design-time component for type generation, validated against both OpenAPI v2 and v3 standards.

The SwaggerProvider source directory has been cleaned of legacy scaffolding artifacts. Specifically, the AssemblyInfo.fs file (containing version metadata), the Library.fs placeholder module, the Script.fsx sample script, and the paket.references and paket.template dependency configuration files have been deleted. This removes unused boilerplate and external dependency manifest files from the project structure.

src/SwaggerProvider · high confidence

The design-time provider now includes Server-Side Request Forgery (SSRF) protection by default, blocking HTTP URLs, localhost, and private IP ranges (both IPv4 and IPv6) when fetching remote schemas. A new \SsrfProtection\ static parameter allows users to disable this validation for development or testing. Additionally, an \IgnoreParseErrors\ parameter lets the provider continue generating types even if the OpenAPI schema contains validation errors, exposing any tolerated errors via the new \SchemaReaderErrors\ property.

src/SwaggerProvider.DesignTime · high confidence

SwaggerProvider now ships a dedicated runtime library (SwaggerProvider.Runtime) that separates runtime helpers from design-time logic. This change enhances error reporting by including the HTTP response body in OpenApiException messages, ensuring users see the full server error context. It also improves performance by reducing allocations and reflection overhead in generated operation code, and adds support for text/plain payload types and DateOnly/TimeOnly serialization.

src/SwaggerProvider.Runtime · high confidence

The build infrastructure has been migrated from the legacy Paket/FAKE runner to the modern .NET SDK tooling, replacing the old \build.cmd\ and \build.sh\ scripts with \dotnet tool restore\ and \dotnet fsi\ commands. The solution file has been restructured to explicitly include the new \SwaggerProvider.DesignTime\ and \Swashbuckle.WebApi.Server\ projects, and the global SDK baseline has been updated to version 10.0.301. Additionally, an \.editorconfig\ file has been added to enforce consistent F\# coding styles, and legacy CI configurations for Travis CI and AppVeyor have been removed.

(repo-wide) · high confidence

Added F\# test server for Swashbuckle integration; Added test fixture controllers for file uploads, text formats, and type variations; Added test script for SwaggerClientProvider; Expanded test coverage for SwaggerProvider internals; Expanded test coverage for SwaggerProvider type provider.

The project has migrated its target framework from .NET Framework 4.0 to .NET 10.0 (net10.0) across the runtime, design-time, and test assemblies. This upgrade is accompanied by a transition from the legacy .csproj format to the SDK-style project system and a switch from NuGet v2 to the v3 API. Additionally, the documentation site now uses VitePress, and the dependency graph has been updated to include FSharp.Core 10.1, System.Text.Json 10.0, and Microsoft.OpenApi 2.12.

(dependencies) · high confidence

The assembly version information in src/Common/AssemblyInfo.fs has been updated to 4.2.0, reflecting the current release version of the SwaggerProvider library.

src/Common · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 59 → 62 (+3.0)
• Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 83 → 83 (-0.3)
• Architecture 100 → 99 (-0.9)
• Maturity 46 → 51 (+5.1)
• Readiness 70 → 65 (-4.9)
• Security 64 → 72 (+8.3)

• Dependency hygiene not measured — no packages were read
• Duplicated block (13 lines × 2) (src/SwaggerProvider.Runtime/RuntimeHelpers.fs)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• No exposed public API
• Secret passed as a command-line argument
• Test reliability not included
• TooManyMethods: RuntimeHelpers (src/SwaggerProvider.Runtime/RuntimeHelpers.fs)
• complexity unreadable for .fs — churn × complexity hotspots could not be measured

• Duplicated block (12 lines × 2) (src/SwaggerProvider.Runtime/RuntimeHelpers.fs)
• Duplicated block (6 lines × 2) (src/SwaggerProvider.DesignTime/OperationCompiler.fs)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• Secret exported as workflow-level env

• 12 commits — 12 feature/other, 0 fixes

• (root) — 3 commits
• tests/SwaggerProvider.Tests — 3 commits
• .github/workflows — 2 commits
• .config/dotnet-tools.json — 1 commit
• .github/aw — 1 commit
• src/SwaggerProvider.DesignTime — 1 commit
• src/SwaggerProvider.Runtime — 1 commit

• change: Bump fantomas from 7.0.5 to 7.0.6 (#484)
• change: Bump fantomas from 7.0.6 to 8.0.0 (#495)
• change: [repo-assist] test: add coverage for in-memory cache (Caching.fs) (#493)
• change: chore(deps): update paket.lock to latest compatible package versions (#486)
• change: chore: gh aw update
• change: eng: bump Microsoft.Identity.Client/Extensions.Msal 4.88 -> 4.89 (transitive, patch) (#494)
• change: hk: update deps
• change: perf: avoid intermediate array allocation in toStrArray helpers (#488)
• change: test: add coverage for CallAsync readBody exception fallback (#496)
• change: test: add unit tests for SchemaReader.validateContentType (#491)
• change: update repo assist
• change: update repo assist

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

fsprojects/SwaggerProvider was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.