packages/.repo_tool_config.yaml at main · flutter/packages · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
# Repo-specific configuration for the flutter_plugin_tools repository tooling.

repo_name: flutter/packages

# The minimum Flutter version that can be used as the minimum SDK constraint
# by packages in this repository. For example, if this is set to 3.22.0, then a
# package can have a minimum SDK version of 3.32.0, 3.35.0, 3.38.0, etc., but
# not 3.29.0.
#
# The major and minor version here should match the lowest version analyzed
# in legacy version analysis (.ci.yaml analyze_legacy).
min_flutter: '3.38.0'

# The list of external packages that are allowed as dependencies.
# All entries here must have an explanation for why they are here. See
# https://github.com/flutter/flutter/blob/master/docs/ecosystem/contributing/README.md#Dependencies
allowed_dependencies:
  # Dependencies that are only allowed if pinned. This should be used for the
  # rare case of a dependency on a package that we have no influence over.
  # A pin can be either an exact version, or a range with an explicit, inclusive
  # max version, which must a version that already exists, not a future version.
  pinned:
    # Cyclomatic complexity linter for camera_android_camerax
    - dart_code_linter

    # Test-only dependency, so does not impact package clients, and
    # has limited impact so could be easily removed if there are
    # ever maintenance issues in the future.
    - lcov_parser

    # This should be removed; see
    # https://github.com/flutter/flutter/issues/130897
    - provider

    # Used by vector_graphics_compiler, as a production, user-facing dependency.
    # This is allowed only with pinned dependencies, so that any changes can be
    # audited before passing them on to clients as transitive updates, to mitigate
    # the risk of the package being compromised.
    - xml

  # Dependencies that can be unpinned. Package should only ever be added here if
  # we fully trust the package's development and publishing process.
  unpinned:
    ## Explicit allowances

    # Owned by individual Flutter Team members.
    # Ideally we would not do this at all, since there's no clear plan for what
    # would happen if the individuals left the Flutter Team, and the
    # repositories may or may not meet Flutter's security standards. Be
    # extremely cautious about adding to this list.
    - build_verify
    - google_maps

    ## Allowed by default:

    # flutter/core-packages
    - mustache_template

    # Dart-team-owned packages
    - analyzer
    - args
    - async
    - build
    - build_config
    - build_runner
    - build_test
    - clock
    - code_builder
    - collection
    - convert
    - crypto
    - dart_style
    - devtools_app_shared
    - devtools_extensions
    - fake_async
    - ffi
    - ffigen
    - file
    - file_testing
    - gcloud
    - graphs
    - html
    - http
    - intl
    - io
    - js
    - jni
    - jni_flutter
    - jnigen
    - json_serializable
    - leak_tracker
    - leak_tracker_flutter_testing
    - lints
    - logging
    - markdown
    - meta
    - mime
    - mockito
    - objective_c
    - path
    - package_config
    - platform
    - process
    - pub_semver
    - shelf
    - shelf_static
    - source_gen
    - stream_transform
    - test
    - test_api
    - vm_service
    - wasm
    - web
    - yaml

    # Google-owned packages
    - _discoveryapis_commons
    - adaptive_navigation
    - dart_skills_lint
    - googleapis
    - googleapis_auth
    - json_annotation
    - material_color_utilities
    - protobuf
    - quiver
    - sanitize_html
    - source_helper
    - vector_math
    - webkit_inspection_protocol

package_labels:
  google_maps_flutter: maps
  webview_flutter: webview