What gets checked
- Every line is a KEY = value setting, a // comment or an #include / #include? directive
- Conditions use Xcode's sdk, arch and config keys, e.g. [sdk=iphoneos*] or [config=Release]
- Balanced $(VARIABLE) references; duplicate settings that silently override earlier ones
- YES/NO settings, deployment targets and SWIFT_VERSION hold valid values; DEVELOPMENT_TEAM is a 10-character Team ID
- Risky settings: code signing or Hardened Runtime turned off, unsandboxed build scripts, deprecated Bitcode, testability or DEBUG=1 in Release
- Keys that look like secrets (API keys, passwords, tokens) stored in plain text