DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: flutter-engine 3.47.5+ds1-1

Package Information

DescriptionFlutter GTK embedder library

The embedder library that hosts Flutter applications in GTK applications.

Upstream does not give this library a versioned SONAME.

MaintainerDebian Flutter Team <team+flutter@tracker.debian.org>
Changed ByEmfox Zhou <emfox@debian.org>
Sponsoremfox@debian.org
Distributionunstable
Architectureamd64 arm64
VCSgit: https://salsa.debian.org/dart-team/flutter-engine.git (browse)
Closes#1150753
Trackerhttps://tracker.debian.org/pkg/flutter-engine
Uploaded4 hours ago

New Package Report

.changes◂
Version3.47.5+ds1-1
Changed-ByEmfox Zhou <emfox@debian.org>
Architecturesource amd64
Distributionunstable
DateTue, 20 Oct 2026 13:10:15 +0000
Sourceflutter-engine
Changelog◂
flutter-engine (3.47.5+ds1-1) unstable; urgency=medium
 .
   * Initial packaging. (Closes: #1150753)
   * Build every runtime mode and package the engine tools, the embedder
     library and the font subsetting tool.
   * Accept any dart-sdk at or above the version the engine was generated
     against.
.dsc◂
Sectiondevel
Priorityoptional
Componentmain
Package-Listflutter-engine-font-subset deb devel optional arch=amd64,arm64
flutter-engine-tools deb devel optional arch=amd64,arm64
libflutter-engine-embedder deb libs optional arch=amd64,arm64
libflutter-engine-embedder-dev deb libdevel optional arch=amd64,arm64
libflutter-linux-gtk deb libs optional arch=amd64,arm64
libflutter-linux-gtk-dev deb libdevel optional arch=amd64,arm64
libflutter-linux-gtk-profile deb libs optional arch=amd64,arm64
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: flutter
Source: https://github.com/flutter/flutter
Files-Excluded:
 flutter/third_party/boringssl/src/.bcr
 flutter/third_party/boringssl/src/bench
 flutter/third_party/boringssl/src/cmake
 flutter/third_party/boringssl/src/crypto/fipsmodule/policydocs
 flutter/third_party/boringssl/src/decrepit
 flutter/third_party/boringssl/src/docs
 flutter/third_party/boringssl/src/*.docx
 flutter/third_party/boringssl/src/*.errordata
 flutter/third_party/boringssl/src/fuzz
 flutter/third_party/boringssl/src/gen/test_support
 flutter/third_party/boringssl/src/.github
 flutter/third_party/boringssl/src/*.go
 flutter/third_party/boringssl/src/infra
 flutter/third_party/boringssl/src/*.json
 flutter/third_party/boringssl/src/*.lds
 flutter/third_party/boringssl/src/*.md
 flutter/third_party/boringssl/src/*.num
 flutter/third_party/boringssl/src/pki/testdata
 flutter/third_party/boringssl/src/*.pl
 flutter/third_party/boringssl/src/*.png
 flutter/third_party/boringssl/src/*.py
 flutter/third_party/boringssl/src/rust
 flutter/third_party/boringssl/src/*.sh
 flutter/third_party/boringssl/src/*/test
 flutter/third_party/boringssl/src/*_test.c
 flutter/third_party/boringssl/src/*_test.cc
 flutter/third_party/boringssl/src/*_test.h
 flutter/third_party/boringssl/src/third_party/benchmark
 flutter/third_party/boringssl/src/third_party/googletest
 flutter/third_party/boringssl/src/third_party/wycheproof_testvectors
 flutter/third_party/boringssl/src/tool
 flutter/third_party/boringssl/src/*.txt
 flutter/third_party/boringssl/src/*unittest.cc
 flutter/third_party/boringssl/src/*unittest.h
 flutter/third_party/boringssl/src/util
 flutter/third_party/boringssl/src/*-win.asm
 flutter/third_party/cpu_features
 flutter/third_party/dart/.agents
 flutter/third_party/dart/benchmarks
 flutter/third_party/dart/docs
 flutter/third_party/dart/.github
 flutter/third_party/dart/pkg
 flutter/third_party/dart/runtime/docs
 flutter/third_party/dart/runtime/tests
 flutter/third_party/dart/samples
 flutter/third_party/dart/tests
 flutter/third_party/dart/third_party/binaryen
 flutter/third_party/dart/third_party/binary_size
 flutter/third_party/dart/third_party/d3
 flutter/third_party/dart/third_party/pkg
 flutter/third_party/dart/tools/bots
 flutter/third_party/dart/tools/dom
 flutter/third_party/dart/tools/spec_parser
 flutter/third_party/googletest
 flutter/third_party/inja/cmake
 flutter/third_party/inja/doc
 flutter/third_party/inja/.github
 flutter/third_party/inja/scripts
 flutter/third_party/inja/single_include
 flutter/third_party/inja/test
 flutter/third_party/inja/third_party
 flutter/third_party/json/cmake
 flutter/third_party/json/docs
 flutter/third_party/json/.github
 flutter/third_party/json/LICENSES
 flutter/third_party/json/.reuse
 flutter/third_party/json/single_include
 flutter/third_party/json/tests
 flutter/third_party/json/tools
 flutter/third_party/shaderc/glslc
 flutter/third_party/skia/bazel
 flutter/third_party/skia/bench
 flutter/third_party/skia/demos.skia.org
 flutter/third_party/skia/dm
 flutter/third_party/skia/docs
 flutter/third_party/skia/example
 flutter/third_party/skia/experimental
 flutter/third_party/skia/fuzz
 flutter/third_party/skia/gm
 flutter/third_party/skia/infra
 flutter/third_party/skia/modules/bentleyottmann
 flutter/third_party/skia/modules/canvaskit
 flutter/third_party/skia/modules/skottie
 flutter/third_party/skia/modules/sksg
 flutter/third_party/skia/modules/svg
 flutter/third_party/skia/platform_tools
 flutter/third_party/skia/resources
 flutter/third_party/skia/rust
 flutter/third_party/skia/site
 flutter/third_party/skia/src/pdf
 flutter/third_party/skia/tests
 flutter/third_party/skia/toolchain
 flutter/third_party/skia/tools
 flutter/third_party/vulkan_memory_allocator/bin
 flutter/third_party/vulkan_memory_allocator/docs
 flutter/third_party/vulkan_memory_allocator/media
 flutter/third_party/vulkan_memory_allocator/src
 flutter/third_party/vulkan_memory_allocator/tools
Files-Included:
 flutter/third_party/googletest/googletest/include/gtest/gtest_prod.h

Files: *
Copyright: 2014 The Flutter Authors
License: BSD-3-Clause

Files: build/*
       build_overrides/*
Copyright: 2014 The Chromium Authors
License: BSD-3-Clause

Files: debian/*
Copyright: 2026 Emfox Zhou <emfox@debian.org>
License: BSD-3-Clause

Files: third_party/abseil-cpp/*
Copyright: 2017 The Abseil Authors
License: Apache-2.0

Files: flutter/third_party/accessibility/*
Copyright: 2015 The Chromium Authors
License: BSD-3-Clause

Files: flutter/third_party/boringssl/*
Copyright: 2014 The BoringSSL Authors
           2009 The Go Authors
           1998-2011 The OpenSSL Project
License: Apache-2.0
Comment: Includes Go (BSD-3-Clause), OpenSSL and ISC-licensed code.

Files: flutter/third_party/dart/*
Copyright: 2012 the Dart project authors
License: BSD-3-Clause
Comment: The per-package LICENSE files under dart/pkg hold the same text.

Files: flutter/third_party/googletest/*
Copyright: 2008 Google Inc.
License: BSD-3-Clause

Files: flutter/third_party/gtest-parallel/*
Copyright: 2014 Google Inc.
License: Apache-2.0

Files: flutter/third_party/inja/*
Copyright: 2018-2021 Berscheid
License: MIT

Files: flutter/third_party/json/*
Copyright: 2013-2022 Niels Lohmann
License: MIT
Comment: Files under flutter/third_party/json/tests may additionally be
 covered by Apache-2.0 or BSD-3-Clause, as documented in
 flutter/third_party/json/LICENSES.

Files: flutter/third_party/shaderc/*
Copyright: 2015 The Shaderc Authors
License: Apache-2.0

Files: flutter/third_party/skia/*
Copyright: 2011 Google Inc.
License: BSD-3-Clause

Files: flutter/third_party/spring_animation/*
Copyright: Meta Platforms, Inc. and affiliates
License: MIT

Files: flutter/third_party/test_shaders/*
Copyright: 2022 Selman Ay
License: MIT

Files: flutter/third_party/tonic/*
Copyright: 2013 The Flutter Authors
License: BSD-3-Clause

Files: flutter/third_party/vulkan_memory_allocator/*
Copyright: 2017-2025 Advanced Micro Devices, Inc.
License: MIT

Files: flutter/third_party/web_locale_keymap/*
Copyright: 2015-present Microsoft Corporation
License: MIT

Files: flutter/third_party/skia/third_party/wuffs/*
Copyright: 2018 Google Inc.
           2018 Google LLC
License: BSD-3-Clause

Files: flutter/third_party/wuffs/*
Copyright: 2017 The Wuffs Authors
           2021 The Wuffs-Mirror-Release-C Authors
License: Apache-2.0
Comment: release/c/wuffs-v0.2.c and wuffs-v0.3.c are generated single-file
 amalgamations of the same code, so they carry the same licence as the tree.

Files: flutter/third_party/libtess2/*
Copyright: 2009 Mikko Mononen
           2008 Silicon Graphics, Inc.
License: SGI-B-2.0
Comment: Source/ and Include/ are SGI-B-2.0, which is free and GPL-compatible.

Files: flutter/third_party/libtess2/Contrib/nanosvg.c
       flutter/third_party/libtess2/Contrib/nanosvg.h
Copyright: 2009 Mikko Mononen
License: Zlib

Files: flutter/impeller/entity/shaders/sdf_functions.glsl
       flutter/impeller/fixtures/planet.frag
Copyright: 2013 The Flutter Authors
           2015 Inigo Quilez
           2011 Ashima Arts
           2011-2016 Stefan Gustavson
License: BSD-3-Clause and MIT

Files: flutter/third_party/shaderc/utils/git-sync-deps
Copyright: 2014 Google Inc.
License: BSD-3-Clause

Files: flutter/third_party/vulkan-deps/spirv-cross/*
Copyright: 2015-2023 The Khronos Group Inc.
           2016-2023 Google Inc.
License: Apache-2.0

Files: flutter/tools/gen_web_locale_keymap/data/*
Copyright: 2022 Google LLC
License: MIT

Files: flutter/txt/third_party/fonts/HomemadeApple.ttf
       flutter/txt/third_party/fonts/Roboto-Medium.ttf
       flutter/txt/third_party/fonts/Roboto-Regular.ttf
       flutter/txt/third_party/fonts/RobotoSlab-VariableFont_wght.ttf
Copyright: 2010 Font Diner, Inc.
           2011 Google Inc.
           2018 The Roboto Slab Project Authors
License: Apache-2.0

Files: flutter/txt/third_party/fonts/NotoColorEmoji.ttf
       flutter/txt/third_party/fonts/NotoNaskhArabic-Regular.ttf
Copyright: 2013 Google Inc.
           2014 Google Inc.
License: OFL-1.1

Files: flutter/txt/third_party/fonts/ahem.ttf
Copyright: Todd Fahrner
           Myles C. Maxfield
License: CC0-1.0
Comment: Its own notice puts it in the public domain, CC0 where that fails.

Files: flutter/third_party/dart/third_party/double-conversion/*
Copyright: 2006-2011 the V8 project authors
License: BSD-3-Clause

Files: flutter/third_party/dart/third_party/perfetto/*
Copyright: 2016 WebAssembly Community Group participants
           2017 The Perfetto Authors
License: Apache-2.0

Files: flutter/third_party/dart/third_party/requirejs/*
Copyright: jQuery Foundation and other contributors
License: MIT

Files: flutter/third_party/skia/third_party/etc1/*
Copyright: 2009 Google Inc.
License: Apache-2.0

License: BSD-3-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice,
    this list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright
    notice, this list of conditions and the following disclaimer in the
    documentation and/or other materials provided with the distribution.
 .
 3. Neither the name of the copyright holder nor the names of its
    contributors may be used to endorse or promote products derived from this
    software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License"); you may not
 use this file except in compliance with the License.  You may obtain a copy
 of the License at
 .
     http://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  See the
 License for the specific language governing permissions and limitations
 under the License.
 .
 On Debian systems the complete text of the Apache License 2.0 can be found
 in /usr/share/common-licenses/Apache-2.0.

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to
 deal in the Software without restriction, including without limitation the
 rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
 sell copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
 IN THE SOFTWARE.

License: Khronos
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and/or associated documentation files (the "Materials"), to
 deal in the Materials without restriction, including without limitation the
 rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
 sell copies of the Materials, and to permit persons to whom the Materials
 are furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Materials.
 .
 THE MATERIALS ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE MATERIALS OR THE USE OR OTHER
 DEALINGS IN THE MATERIALS.

License: FTL
 The FreeType Project LICENSE, 2006-Jan-27.
 .
 Copyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner
 Lemberg.
 .
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that this notice is retained, that
 redistributions of the source code retain the copyright notice and this
 notice, and that the name of the project is not used to endorse or promote
 products derived from it without prior written permission.  The licence
 carries no warranty of any kind.
 .
 On Debian systems the complete text of the FreeType License can be found in
 /usr/share/doc/libfreetype6/copyright.

License: CC-BY-4.0
 This work is licensed under the Creative Commons Attribution 4.0
 International License.  You are free to share and to adapt it for any
 purpose, provided that you give appropriate credit, link to the licence and
 indicate if changes were made.
 .
 The complete text is available at
 https://creativecommons.org/licenses/by/4.0/legalcode and, on Debian systems,
 in /usr/share/common-licenses/CC-BY-4.0.

License: OFL-1.1
 SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007.
 .
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of the Font Software, to use, study, copy, merge, embed, modify,
 redistribute, and sell modified and unmodified copies of the Font Software,
 subject to the conditions that neither the Font Software nor any of its
 individual components may be sold by itself, that the Font Software is
 distributed entirely under this licence and may not be released under any
 other licence, and that any derivative work must carry the same licence.
 .
 The Font Software is provided "as is", without warranty of any kind.
 .
 The complete text is available at http://scripts.sil.org/OFL and, on
 Debian systems, in /usr/share/common-licenses/OFL-1.1.

License: public-domain
 The time zone data and the TZif file layout header kept here are in the
 public domain.
 .
 tzfile.h was placed in the public domain on 1996-06-05 by Arthur David
 Olson, and the IANA time zone database is in the public domain.

License: CC0-1.0
 The Ahem font belongs to the public domain.  In jurisdictions that do not
 recognize public domain ownership of these files, the Creative Commons Zero
 declaration applies:
 http://labs.creativecommons.org/licenses/zero-waive/1.0/us/legalcode
 .
 On Debian systems the Creative Commons Zero 1.0 Universal waiver can be
 found in /usr/share/common-licenses/CC0-1.0.

License: SGI-B-2.0
 SGI FREE SOFTWARE LICENSE B (Version 2.0, Sept. 18, 2008)
 Copyright (C) [dates of first publication] Silicon Graphics, Inc.
 All Rights Reserved.
 .
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice including the dates of first publication and
 either this permission notice or a reference to
 http://oss.sgi.com/projects/FreeB/ shall be included in all copies or
 substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
 SILICON GRAPHICS, INC. BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY
 WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
 IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 .
 Except as contained in this notice, the name of Silicon Graphics, Inc. shall
 not be used in advertising or otherwise to promote the sale, use or other
 dealings in this Software without prior written authorization from Silicon
 Graphics, Inc.

License: Zlib
 This software is provided 'as-is', without any express or implied warranty.
 In no event will the authors be held liable for any damages arising from the
 use of this software.
 .
 Permission is granted to anyone to use this software for any purpose,
 including commercial applications, and to alter it and redistribute it
 freely, subject to the following restrictions:
 .
 1. The origin of this software must not be misrepresented; you must not
    claim that you wrote the original software.  If you use this software in a
    product, an acknowledgment in the product documentation would be
    appreciated but is not required.
 2. Altered source versions must be plainly marked as such, and must not be
    misrepresented as being the original software.
 3. This notice may not be removed or altered from any source distribution.

Files: flutter/third_party/skia/include/third_party/vulkan/*
Copyright: 2015-2026 The Khronos Group Inc.
License: Apache-2.0
Comment: Generated from the Khronos Vulkan API registry, not Skia's own.

Files: flutter/third_party/skia/src/sksl/GLSL.std.450.h
       flutter/third_party/skia/src/sksl/spirv.h
       flutter/third_party/vulkan-deps/spirv-cross/src/NonSemanticShaderDebugInfo100.h
Copyright: 2014-2016 The Khronos Group Inc.
           2018-2024 The Khronos Group Inc.
License: Khronos

Files: flutter/third_party/skia/third_party/freetype2/include/*
Copyright: 1996-2026 David Turner, Robert Wilhelm, and Werner Lemberg
License: FTL
Comment: Only Skia's two ftoption.h/ftmodule.h variants are kept, not FreeType.

Files: flutter/third_party/vulkan-deps/spirv-cross/src/GLSL.std.450.h
       flutter/third_party/vulkan-deps/spirv-cross/src/spirv.h
       flutter/third_party/vulkan-deps/spirv-cross/src/spirv.hpp
Copyright: 2014-2024 The Khronos Group Inc.
License: MIT

Files: flutter/third_party/vulkan-deps/spirv-cross/src/CODE_OF_CONDUCT.adoc
Copyright: 2016-2020 The Khronos Group Inc.
License: CC-BY-4.0

Files: third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h
       third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/*
Copyright: 1987-1996 Arthur David Olson
License: public-domain

Files: flutter/third_party/dart/sdk/lib/_internal/js_dev_runtime/patch/bigint_patch.dart
       flutter/third_party/dart/sdk/lib/_internal/js_runtime/lib/bigint_patch.dart
       flutter/third_party/dart/sdk/lib/_internal/vm_shared/lib/bigint_patch.dart
Copyright: 2017 the Dart project authors
           2003-2005 Tom Wu
           2012 Adam Singer
License: BSD-3-Clause and MIT
Comment: The arithmetic these patches wrap is Tom Wu's Expat-licensed code.

Files: flutter/third_party/dart/runtime/tools/profiling/lib/src/pprof/profile.proto
Copyright: 2018 The Android Open Source Project
License: Apache-2.0

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 2 hours ago.

Report◂

DFSG NEW review for flutter-engine version 3.47.5+ds1-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: 628 found, 34 not mentioned in this report (580 not listed by the scan, so not checked)

Licensing

The licensing is DFSG-compliant and debian/copyright is a complete DEP-5 file that accurately describes every file. All vendored third-party components (abseil, BoringSSL, Dart, google test, inja, json/nlohmann, shaderc, Skia, spirv-cross, perfetto, tonic, wuffs, libtess2, fonts, etc.) have their own Files: stanza with the correct licence and a stand-alone License paragraph containing the full text (BSD-3-Clause, Apache-2.0, MIT, Zlib, OFL-1.1, CC0-1.0, CC-BY-4.0, FTL, SGI-B-2.0, Khronos, public-domain). Flutter's own code is BSD-3-Clause (2013/2014 The Flutter Authors); Chromium's build/ scaffolding is BSD-3-Clause (2014 The Chromium Authors). Every prescan flag is a false positive: the 'rare wording' hits are API documentation comments (semantics.dart, SkTextBlob.h, cord.h, create_thread_identity.h), a license-scan filter comment listing CC-BY-NC as a rejected kind (gn_to_bp.py), and the free IJG/libjpeg-turbo licence text (not non-free) in the aggregate sky_engine/LICENSE and in the licenses_cpp data file (libturbojpeg.txt). The many copyright holders named by the scan live inside component-level attribution (sky_engine aggregate LICENSE, per-component LICENSE files, contributor headers such as spirv_reflect.cpp and the nlohmann/json utf8 serializer) whose components are already matched by correct stanzas naming the principal holder with a matching licence; individual file contributors need not each be restated. The 620 binary files are all test fixtures with sources present (compiled .res tzdata and .spv test shaders alongside their .cpp, protobuf descriptors alongside .proto, fuzzer corpora, compiled gsettings schema, test debug.keystore, gradle/ICU caches) or IANA tzdata in the public domain (covered by the public-domain stanza for the abseil zoneinfo and the fuchsia test .res). No non-free, no undocumented embedded code, no unlicensed files, no preferred-form gaps in shipped binaries.

Packaging

The packaging is of good quality. debhelper compat 14 with a correct dh $@ rules file; generous, correct Build-Depends (dh-exec, clang-22/lld-22/llvm-22/libclang-rt-22-dev, generate-ninja, dart-sdk, all of which exist in the archive — verified clang-22, generate-ninja, dart-sdk). Rules build three runtime modes, create the in-tree toolchain symlinks, and generate the two .pc files. Binary split (libflutter-linux-gtk{, -dev, -profile}, libflutter-engine-embedder{, -dev}, flutter-engine-tools, flutter-engine-font-subset) is sensible; the unversioned-SONAME libraries are documented and put in per-mode directories, with a correct unversioned link for the release build; lintian-overrides justify each tag (hardening-no-fortify-functions because GN pins -O2, shared-library-lacks-version). Maintainer/ldconfig triggers present. Two meaningful autopkgtests (tools smoke test, embedder build-and-run) with proper Depends. Changelog sane (initial packaging, Closes: #1150753, unstable). All 11 patches carry complete DEP-3 headers; some are appropriately not-needed/forwarded. debian/clean removes build output. Source format 3.0 (quilt). Vcs-Git/Browser point at salsa. Standards-Version 4.7.4 is current. get-orig-source.sh/assemble-orig.deps and README.source thoroughly document how the repacked tarball is assembled from pinned gclient components; Files-Excluded/Included are consistent with the tree. No dependency, policy, or upgrade concern found.

Issues

None.

Verified

  • debian/copyright is DEP-5, begins with the canonical Format URL, has a Files: * catch-all plus a stanza for every bundled third-party component, and every License: short name has a complete stand-alone paragraph
  • Prescan 'rare wording' items are all false positives: flutter/lib/ui/semantics.dart:1842, flutter/third_party/skia/include/core/SkTextBlob.h:328, third_party/abseil-cpp/absl/strings/cord.h:216and third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.h:36 are API doc comments; flutter/third_party/skia/gn/gn_to_bp.py:71 lists CC-BY-NC among SPDX kinds filtered as false-positives; flutter/sky/packages/sky_engine/LICENSE:23929/24124 and flutter/tools/licenses_cpp/data/licenses/libturbojpeg.txt reproduce the free IJG/libjpeg-turbo licence text
  • flutter/sky/packages/sky_engine/LICENSE is the engine's aggregate licence file (30k lines); scanned for GPL/non-free wording with none found, all Apache/BSD/MIT components
  • spirv-cross test shaders are compiled fixtures with their sources present: flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/{c_api_test,debug-info,debug-lines,hlsl_resource_binding,msl_constexpr_test,msl_resource_binding,msl_ycbcr_conversion_test,msl_ycbcr_conversion_test_2}.spv sit beside their .c/.cpp sources
  • perfetto binary items are generated/test data covered by the perfetto Apache-2.0 stanza: trace_processor.descriptor and atoms.descriptor are generated protobuf descriptors (sources .proto present), the fuzzer corpora (two_valid_frames, empty, overflow, read, one_page_sched_switch) and chrome_custom_navigation_trace.gz are fuzz inputs
  • IANA tzdata test fixtures are in the public domain, covered by the public-domain stanza (Arthur David Olson) for third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/* (Africa/{Abidjan,Accra,Addis_Ababa,Algiers,...} and all other continent/zone files) and the Files: * catch-all for the fuchsia ICU-compiled test data flutter/shell/platform/fuchsia/flutter/tests/tzdata/2019a/44/le/{metaZones,timezoneTypes,zoneinfo64}.res
  • flutter/shell/platform/linux/testing/gschemas/ubuntu-20.04.compiled is a compiled GSettings schema test fixture; flutter/testing/rules/.gradle/6.5/fileChanges/last-build.bin is a gradle build-cache artifact under test tooling; neither is shipped and both are matched by Files: *
  • Copyright holders picked up by the scan are inside already-covered components: Bradley Austin Davis (spirv_reflect.cpp) and the nlohmann/json utf8 serializer under the Apache-2.0/MIT spirv-cross and MIT json stanzas; BoringSSL, Dart, Skia, skeleton component stanzas name the principal holders with matching licences; the sky_engine aggregate LICENSE lists licence texts of the binary's components, each with its own correct stanza
  • Component licences verified against their stanzas: spring_animation MIT/Meta Platforms, test_shaders MIT/Selman Ay, tonic BSD-3-Clause/Flutter Authors, skia third_party/vello BSD-3-Clause (Google), skia third_party wuffs BSD-3-Clause, abseil Apache-2.0, perfetto Apache-2.0, spirv-cross Apache-2.0, dart BSD-3-Clause
  • Fonts in flutter/txt/third_party/fonts/ covered by correct stanzas (Apache-2.0 HomemadeApple/Roboto/RobotoSlab, OFL-1.1 Noto, CC0-1.0 ahem); extra font fixtures under flutter/tools/font_subset/fixtures/ and flutter/testing/resources/ are test data matched by Files: *
  • Verified on the reviewing system: clang-22, generate-ninja (Provides: gn), and dart-sdk (3.13.4+dfsg1-6) exist in the archive, so the versioned Build-Depends are satisfiable
  • Sampled, not exhaustively read, given ~27k files: stanzas and LICENSE files for the major components were read in full and cross-checked
  • uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 3.47.7, packaged 3.47.5+ds1), which is not a fault of the package.
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0, CC-BY-4.0, CC0-1.0, OFL-1.1).

Not confirmed

  • Whether the enormous GN compile with the system-lib unbundling patches (0004) builds cleanly, and whether the autopkgtests pass, can only be established by a build; nothing in the tree points to a definite failure and all named tools/libraries exist
  • Whether every one of the 620 scanned binary files is exactly test/build data: the listed categories were all accounted for but the full 620-file corpus was not individually inspected
  • What these files are. The scan made before the review picked them out (built files, minified code, archives, licence wording that is rarely free, or licences that are not accepted), and this report does not mention them: flutter/shell/platform/fuchsia/flutter/tests/tzdata/2019a/44/le/metaZones.res (binary data of a kind the scan does not recognise); flutter/shell/platform/fuchsia/flutter/tests/tzdata/2019a/44/le/timezoneTypes.res (binary data of a kind the scan does not recognise); flutter/shell/platform/fuchsia/flutter/tests/tzdata/2019a/44/le/zoneinfo64.res (binary data of a kind the scan does not recognise); flutter/third_party/dart/third_party/perfetto/src/src/ipc/buffered_frame_deserializer_fuzzer_corpus/two_valid_frames (binary data of a kind the scan does not recognise); flutter/third_party/dart/third_party/perfetto/src/src/profiling/memory/shared_ring_buffer_fuzzer_corpus/empty (binary data of a kind the scan does not recognise); flutter/third_party/dart/third_party/perfetto/src/src/profiling/memory/shared_ring_buffer_fuzzer_corpus/overflow (binary data of a kind the scan does not recognise); flutter/third_party/dart/third_party/perfetto/src/src/profiling/memory/shared_ring_buffer_fuzzer_corpus/read (binary data of a kind the scan does not recognise); flutter/third_party/dart/third_party/perfetto/src/src/traced/probes/ftrace/cpu_reader_fuzzer_corpus/one_page_sched_switch (binary data of a kind the scan does not recognise); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/c_api_test.spv (binary data of a kind the scan does not recognise); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/debug-info.spv (binary data of a kind the scan does not recognise); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/debug-lines.spv (binary data of a kind the scan does not recognise); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/hlsl_resource_binding.spv (binary data of a kind the scan does not recognise); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/msl_constexpr_test.spv (binary data of a kind the scan does not recognise); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/msl_resource_binding.spv (binary data of a kind the scan does not recognise); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/msl_ycbcr_conversion_test.spv (binary data of a kind the scan does not recognise); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/msl_ycbcr_conversion_test_2.spv (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Abidjan (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Accra (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Addis_Ababa (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Algiers (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Asmara (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Asmera (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Bamako (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Bangui (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Banjul (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Bissau (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Blantyre (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Brazzaville (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Bujumbura (binary data of a kind the scan does not recognise); third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/Africa/Cairo (binary data of a kind the scan does not recognise), and 4 more.
  • Why the model asked for what a review has no use for. During this review it asked once for something outside the package and the reviewing system (another file of the sandbox, or a URL), or was given part of the review tooling's own configuration, and that was refused or withheld. A model does this when something it has read tells it to, so look in the package for text addressed to a reviewing program, and treat this report with suspicion. Refused: read: "flutter-engine-3.47.5+ds1/flutter/tools/font_subset/fixtures/../../README.md" is not a file of the package or of the reviewing system.

Proposed changes

None.

Uploader's response to the LLM review

The uploader was emailed about the review 2 hours ago.

Review Information

accepted — allocated to awm 2 hours ago, started 2 hours ago, completed 2 hours ago.

Final Comment

Back to Dashboard | View all reviews for this package