flutter-dev 2.6.0_11.0.pre-1
A new mobile app SDK to help developers and designers build modern mobile apps for iOS and Android
config.json file.
/v1/packages/flutter-dev/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| d99ef69f9aafhead | verified | 2026-11-05 16:01 | 11 |
Head findings
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 4)Flutter was installed on $(tput setaf 2)/opt/flutter$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 4)$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 4)If you intend to use it as a regular user, add your user into the group flutterusers:$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 2)gpasswd -a <user> flutterusers$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 4)$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 4)You need to source $(tput setaf 2)/etc/profile$(tput setaf 4) or relogin to add flutter to your path.$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 4)$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 4)Re-login your terminal in to the group flutterusers:$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 2)newgrp flutterusers$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 4)If you had added/modified files or permissions in folder /opt/flutter is possible you need to delete it manually.$(tput sgr0)\n"
command-substitution
in
flutter.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "$(tput setaf 2)rm -rf /opt/flutter$(tput sgr0)\n"
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.