flutter-common 3.41.2-3

seededverifiedout-of-date· maintained by WithTheBraid· BSD, CCPL, custom

Flutter SDK component - common SDK files and pub cache

shelly install aur flutter-common --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly config.json file.

Metadata

Package base
flutter
Maintainer
WithTheBraid
Submitter
flipflop97
Votes
152
Popularity
0.138217
First submitted
2017-06-05 21:03
Last modified
2026-02-22 06:08
Out-of-date
2026-04-29 07:28

Relations

Make dependencies

Security

Verified - no high/critical red flags - content is served.
revision 630b7f9e7ec5 scanned 2026-11-05 16:16 UTC findings 30 medium

Revision scans

Revision Status Scanned Findings
630b7f9e7ec5head verified 2026-11-05 16:16 30

Head findings

medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

_flutterarch=$(echo "$CARCH" | sed s/aarch64/arm64/ | sed s/x86_64/x64/)
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

DART_BINARY=$(readlink $(command -v dart))
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

echo -e "  Dart executable:	$(command -v dart)"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

"engineRevision": "$(cat "${srcdir}/${_group}/bin/internal/engine.version")",
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

"dartSdkVersion": "$(dart --version | awk '{print $4}')",
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

"devToolsVersion": $(jq '.version' < ${DART_ROOT}/bin/resources/devtools/version.json),
medium risky-tool in PKGBUILD

'gradle' is invoked - this fetches/executes external code outside alpm's control.

gradle init --type basic --project-name flutter --dsl kotlin --incubating
medium risky-tool in PKGBUILD

'gradle' is invoked - this fetches/executes external code outside alpm's control.

gradle wrapper
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

DART_BINARY=$(readlink $(command -v dart))
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

$(declare -f "_package${_p#$_group}")
medium command-substitution in flutter-common.install

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

MAJOR=$(echo $OLD | awk -F '.' '{print $1}')
medium command-substitution in flutter-common.install

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

MINOR=$(echo $OLD | awk -F '.' '{print $2}')
medium command-substitution in flutter-common.install

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

PATCH=$(echo $OLD | awk -F '+' '{print $1}' | awk -F '.' '{print $3}')
medium command-substitution in flutter-common.install

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

MAJOR=$(echo $OLD | awk -F '.' '{print $1}')
medium command-substitution in flutter-common.install

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

MINOR=$(echo $OLD | awk -F '.' '{print $2}')
medium command-substitution in flutter-common.install

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

PATCH=$(echo $OLD | awk -F '+' '{print $1}' | awk -F '.' '{print $3}')
medium command-substitution in flutter.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

DART_BINARY=$(readlink $(which dart))
medium command-substitution in flutter.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

if [ "$(id -u)" = "0" ] && ! [ -f /.dockerenv ] && [ "$CI" != "true" ] && [ "$BOT" != "true" ] && [ "$CONTINUOUS_INTEGRATION" != "true" ]; then
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly ENGINE_VERSION="$(cat src/flutter/bin/internal/engine.version)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly MATERIAL_FONTS_VERSION="$(cat src/flutter/bin/internal/material_fonts.version | cut -d '/' -f4)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly GRADLE_WRAPPER_VERSION="$(cat src/flutter/bin/internal/gradle_wrapper.version | cut -d '/' -f3)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly LIBIMOBILEDEVICE_VERSION="$(cat src/flutter/bin/internal/libimobiledevice.version)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly USBMUXD_VERSION="$(cat src/flutter/bin/internal/libusbmuxd.version)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly LIBPLIST_VERSION="$(cat src/flutter/bin/internal/libplist.version)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly OPENSSL_VERSION="$(cat src/flutter/bin/internal/openssl.version)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly IOS_DEPLOY_VERSION="$(cat src/flutter/bin/internal/ios-deploy.version)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly SDK_VERSION="$(cat src/dart/dart-sdk/version)"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly SDK_STRING="$(grep sdk src/flutter/packages/flutter_tools/pubspec.yaml | awk -F "'" '{print $2}')"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly SDK_MIN="$(echo $SDK_STRING | awk -F '=' '{print $2}' | awk -F '-' '{print $1}')"
medium command-substitution in update-artifact-versions.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

readonly SDK_MAX="$(echo $SDK_STRING | awk -F '<' '{print $2}' | awk -F '-' '{print $1}')"

Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.

← Back to the package catalog

Connection lost

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin. Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session. Please retry or reload the page.