DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: flutter-engine 3.47.5+ds1-2

Package Information

DescriptionFlutter GTK embedder library

The embedder library that hosts Flutter applications in GTK applications.

Upstream does not give this library a versioned SONAME.

MaintainerDebian Flutter Team <team+flutter@tracker.debian.org>
Changed ByEmfox Zhou <emfox@debian.org>
Sponsoremfox@debian.org
Distributionunstable
Architectureamd64 arm64 armhf all
VCSgit: https://salsa.debian.org/dart-team/flutter-engine.git (browse)
Binary NEWYes (new binary packages of a source already in sid)
Trackerhttps://tracker.debian.org/pkg/flutter-engine
Uploaded13 days ago

New Package Report

.changes◂
Architecturesource amd64 all
Distributionunstable
DateSat, 24 Oct 2026 15:05:00 +0800
Sourceflutter-engine
Version3.47.5+ds1-2
Changed-ByEmfox Zhou <emfox@debian.org>
Changelog◂
flutter-engine (3.47.5+ds1-2) unstable; urgency=medium
 .
   * Build the platform kernel with the kernel compiler from the
     dart-kernel-compiler package.  The tool cannot be compiled here because
     the repack leaves the Dart sources out.
   * New binary packages: sky-engine, flutter-patched-sdk and flutter-tester,
     the artefacts the Dart and Flutter tooling needs to resolve and run
     Flutter code.
   * Point the Dart tree at the dart-args and dart-path packages so that the
     ui_web sources can be rewritten as upstream does.
   * flutter-patched-sdk carries the product kernel that a release build
     compiles as well as the JIT one.
   * Build on armhf.  The Dart SDK comes from the archive, so the prebuilts
     upstream ships no longer limit the architectures; the gn script learns
     what a 32-bit arm host is, and hard float without NEON matches the armhf
     baseline.
.dsc◂
Sectiondevel
Priorityoptional
Componentmain
Package-Listflutter-engine-font-subset deb devel optional arch=amd64,arm64,armhf
flutter-engine-tools deb devel optional arch=amd64,arm64,armhf
flutter-patched-sdk deb devel optional arch=all
flutter-tester deb devel optional arch=amd64,arm64,armhf
libflutter-engine-embedder deb libs optional arch=amd64,arm64,armhf
libflutter-engine-embedder-dev deb libdevel optional arch=amd64,arm64,armhf
libflutter-linux-gtk deb libs optional arch=amd64,arm64,armhf
libflutter-linux-gtk-dev deb libdevel optional arch=amd64,arm64,armhf
libflutter-linux-gtk-profile deb libs optional arch=amd64,arm64,armhf
sky-engine deb devel optional arch=all
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: flutter
Source: https://github.com/flutter/flutter
Files-Excluded:
 flutter/third_party/boringssl/src/.bcr
 flutter/third_party/boringssl/src/bench
 flutter/third_party/boringssl/src/cmake
 flutter/third_party/boringssl/src/crypto/fipsmodule/policydocs
 flutter/third_party/boringssl/src/decrepit
 flutter/third_party/boringssl/src/docs
 flutter/third_party/boringssl/src/*.docx
 flutter/third_party/boringssl/src/*.errordata
 flutter/third_party/boringssl/src/fuzz
 flutter/third_party/boringssl/src/gen/test_support
 flutter/third_party/boringssl/src/.github
 flutter/third_party/boringssl/src/*.go
 flutter/third_party/boringssl/src/infra
 flutter/third_party/boringssl/src/*.json
 flutter/third_party/boringssl/src/*.lds
 flutter/third_party/boringssl/src/*.md
 flutter/third_party/boringssl/src/*.num
 flutter/third_party/boringssl/src/pki/testdata
 flutter/third_party/boringssl/src/*.pl
 flutter/third_party/boringssl/src/*.png
 flutter/third_party/boringssl/src/*.py
 flutter/third_party/boringssl/src/rust
 flutter/third_party/boringssl/src/*.sh
 flutter/third_party/boringssl/src/*/test
 flutter/third_party/boringssl/src/*_test.c
 flutter/third_party/boringssl/src/*_test.cc
 flutter/third_party/boringssl/src/*_test.h
 flutter/third_party/boringssl/src/third_party/benchmark
 flutter/third_party/boringssl/src/third_party/googletest
 flutter/third_party/boringssl/src/third_party/wycheproof_testvectors
 flutter/third_party/boringssl/src/tool
 flutter/third_party/boringssl/src/*.txt
 flutter/third_party/boringssl/src/*unittest.cc
 flutter/third_party/boringssl/src/*unittest.h
 flutter/third_party/boringssl/src/util
 flutter/third_party/boringssl/src/*-win.asm
 flutter/third_party/cpu_features
 flutter/third_party/dart/.agents
 flutter/third_party/dart/benchmarks
 flutter/third_party/dart/docs
 flutter/third_party/dart/.github
 flutter/third_party/dart/pkg
 flutter/third_party/dart/runtime/docs
 flutter/third_party/dart/runtime/tests
 flutter/third_party/dart/samples
 flutter/third_party/dart/tests
 flutter/third_party/dart/third_party/binaryen
 flutter/third_party/dart/third_party/binary_size
 flutter/third_party/dart/third_party/d3
 flutter/third_party/dart/third_party/pkg
 flutter/third_party/dart/tools/bots
 flutter/third_party/dart/tools/dom
 flutter/third_party/dart/tools/spec_parser
 flutter/third_party/googletest
 flutter/third_party/inja/cmake
 flutter/third_party/inja/doc
 flutter/third_party/inja/.github
 flutter/third_party/inja/scripts
 flutter/third_party/inja/single_include
 flutter/third_party/inja/test
 flutter/third_party/inja/third_party
 flutter/third_party/json/cmake
 flutter/third_party/json/docs
 flutter/third_party/json/.github
 flutter/third_party/json/LICENSES
 flutter/third_party/json/.reuse
 flutter/third_party/json/single_include
 flutter/third_party/json/tests
 flutter/third_party/json/tools
 flutter/third_party/shaderc/glslc
 flutter/third_party/skia/bazel
 flutter/third_party/skia/bench
 flutter/third_party/skia/demos.skia.org
 flutter/third_party/skia/dm
 flutter/third_party/skia/docs
 flutter/third_party/skia/example
 flutter/third_party/skia/experimental
 flutter/third_party/skia/fuzz
 flutter/third_party/skia/gm
 flutter/third_party/skia/infra
 flutter/third_party/skia/modules/bentleyottmann
 flutter/third_party/skia/modules/canvaskit
 flutter/third_party/skia/modules/skottie
 flutter/third_party/skia/modules/sksg
 flutter/third_party/skia/modules/svg
 flutter/third_party/skia/platform_tools
 flutter/third_party/skia/resources
 flutter/third_party/skia/rust
 flutter/third_party/skia/site
 flutter/third_party/skia/src/pdf
 flutter/third_party/skia/tests
 flutter/third_party/skia/toolchain
 flutter/third_party/skia/tools
 flutter/third_party/vulkan_memory_allocator/bin
 flutter/third_party/vulkan_memory_allocator/docs
 flutter/third_party/vulkan_memory_allocator/media
 flutter/third_party/vulkan_memory_allocator/src
 flutter/third_party/vulkan_memory_allocator/tools
Files-Included:
 flutter/third_party/googletest/googletest/include/gtest/gtest_prod.h

Files: *
Copyright: 2014 The Flutter Authors
License: BSD-3-Clause

Files: build/*
       build_overrides/*
Copyright: 2014 The Chromium Authors
License: BSD-3-Clause

Files: debian/*
Copyright: 2026 Emfox Zhou <emfox@debian.org>
License: BSD-3-Clause

Files: third_party/abseil-cpp/*
Copyright: 2017 The Abseil Authors
License: Apache-2.0

Files: flutter/third_party/accessibility/*
Copyright: 2015 The Chromium Authors
License: BSD-3-Clause

Files: flutter/third_party/boringssl/*
Copyright: 2014 The BoringSSL Authors
           2009 The Go Authors
           1998-2011 The OpenSSL Project
License: Apache-2.0
Comment: Includes Go (BSD-3-Clause), OpenSSL and ISC-licensed code.

Files: flutter/third_party/dart/*
Copyright: 2012 the Dart project authors
License: BSD-3-Clause
Comment: The per-package LICENSE files under dart/pkg hold the same text.

Files: flutter/third_party/googletest/*
Copyright: 2008 Google Inc.
License: BSD-3-Clause

Files: flutter/third_party/gtest-parallel/*
Copyright: 2014 Google Inc.
License: Apache-2.0

Files: flutter/third_party/inja/*
Copyright: 2018-2021 Berscheid
License: MIT

Files: flutter/third_party/json/*
Copyright: 2013-2022 Niels Lohmann
License: MIT
Comment: Files under flutter/third_party/json/tests may additionally be
 covered by Apache-2.0 or BSD-3-Clause, as documented in
 flutter/third_party/json/LICENSES.

Files: flutter/third_party/shaderc/*
Copyright: 2015 The Shaderc Authors
License: Apache-2.0

Files: flutter/third_party/skia/*
Copyright: 2011 Google Inc.
License: BSD-3-Clause

Files: flutter/third_party/spring_animation/*
Copyright: Meta Platforms, Inc. and affiliates
License: MIT

Files: flutter/third_party/test_shaders/*
Copyright: 2022 Selman Ay
License: MIT

Files: flutter/third_party/tonic/*
Copyright: 2013 The Flutter Authors
License: BSD-3-Clause

Files: flutter/third_party/vulkan_memory_allocator/*
Copyright: 2017-2025 Advanced Micro Devices, Inc.
License: MIT

Files: flutter/third_party/web_locale_keymap/*
Copyright: 2015-present Microsoft Corporation
License: MIT

Files: flutter/third_party/skia/third_party/wuffs/*
Copyright: 2018 Google Inc.
           2018 Google LLC
License: BSD-3-Clause

Files: flutter/third_party/wuffs/*
Copyright: 2017 The Wuffs Authors
           2021 The Wuffs-Mirror-Release-C Authors
License: Apache-2.0
Comment: release/c/wuffs-v0.2.c and wuffs-v0.3.c are generated single-file
 amalgamations of the same code, so they carry the same licence as the tree.

Files: flutter/third_party/libtess2/*
Copyright: 2009 Mikko Mononen
           2008 Silicon Graphics, Inc.
License: SGI-B-2.0
Comment: Source/ and Include/ are SGI-B-2.0, which is free and GPL-compatible.

Files: flutter/third_party/libtess2/Contrib/nanosvg.c
       flutter/third_party/libtess2/Contrib/nanosvg.h
Copyright: 2009 Mikko Mononen
License: Zlib

Files: flutter/impeller/entity/shaders/sdf_functions.glsl
       flutter/impeller/fixtures/planet.frag
Copyright: 2013 The Flutter Authors
           2015 Inigo Quilez
           2011 Ashima Arts
           2011-2016 Stefan Gustavson
License: BSD-3-Clause and MIT

Files: flutter/third_party/shaderc/utils/git-sync-deps
Copyright: 2014 Google Inc.
License: BSD-3-Clause

Files: flutter/third_party/vulkan-deps/spirv-cross/*
Copyright: 2015-2023 The Khronos Group Inc.
           2016-2023 Google Inc.
License: Apache-2.0

Files: flutter/tools/gen_web_locale_keymap/data/*
Copyright: 2022 Google LLC
License: MIT

Files: flutter/txt/third_party/fonts/HomemadeApple.ttf
       flutter/txt/third_party/fonts/Roboto-Medium.ttf
       flutter/txt/third_party/fonts/Roboto-Regular.ttf
       flutter/txt/third_party/fonts/RobotoSlab-VariableFont_wght.ttf
Copyright: 2010 Font Diner, Inc.
           2011 Google Inc.
           2018 The Roboto Slab Project Authors
License: Apache-2.0

Files: flutter/txt/third_party/fonts/NotoColorEmoji.ttf
       flutter/txt/third_party/fonts/NotoNaskhArabic-Regular.ttf
Copyright: 2013 Google Inc.
           2014 Google Inc.
License: OFL-1.1

Files: flutter/txt/third_party/fonts/ahem.ttf
Copyright: Todd Fahrner
           Myles C. Maxfield
License: CC0-1.0
Comment: Its own notice puts it in the public domain, CC0 where that fails.

Files: flutter/third_party/dart/third_party/double-conversion/*
Copyright: 2006-2011 the V8 project authors
License: BSD-3-Clause

Files: flutter/third_party/dart/third_party/perfetto/*
Copyright: 2016 WebAssembly Community Group participants
           2017 The Perfetto Authors
License: Apache-2.0

Files: flutter/third_party/dart/third_party/requirejs/*
Copyright: jQuery Foundation and other contributors
License: MIT

Files: flutter/third_party/skia/third_party/etc1/*
Copyright: 2009 Google Inc.
License: Apache-2.0

License: BSD-3-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice,
    this list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright
    notice, this list of conditions and the following disclaimer in the
    documentation and/or other materials provided with the distribution.
 .
 3. Neither the name of the copyright holder nor the names of its
    contributors may be used to endorse or promote products derived from this
    software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License"); you may not
 use this file except in compliance with the License.  You may obtain a copy
 of the License at
 .
     http://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  See the
 License for the specific language governing permissions and limitations
 under the License.
 .
 On Debian systems the complete text of the Apache License 2.0 can be found
 in /usr/share/common-licenses/Apache-2.0.

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to
 deal in the Software without restriction, including without limitation the
 rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
 sell copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
 IN THE SOFTWARE.

License: Khronos
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and/or associated documentation files (the "Materials"), to
 deal in the Materials without restriction, including without limitation the
 rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
 sell copies of the Materials, and to permit persons to whom the Materials
 are furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Materials.
 .
 THE MATERIALS ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE MATERIALS OR THE USE OR OTHER
 DEALINGS IN THE MATERIALS.

License: FTL
 The FreeType Project LICENSE, 2006-Jan-27.
 .
 Copyright 1996-2002, 2006 by David Turner, Robert Wilhelm, and Werner
 Lemberg.
 .
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that this notice is retained, that
 redistributions of the source code retain the copyright notice and this
 notice, and that the name of the project is not used to endorse or promote
 products derived from it without prior written permission.  The licence
 carries no warranty of any kind.
 .
 On Debian systems the complete text of the FreeType License can be found in
 /usr/share/doc/libfreetype6/copyright.

License: CC-BY-4.0
 This work is licensed under the Creative Commons Attribution 4.0
 International License.  You are free to share and to adapt it for any
 purpose, provided that you give appropriate credit, link to the licence and
 indicate if changes were made.
 .
 The complete text is available at
 https://creativecommons.org/licenses/by/4.0/legalcode and, on Debian systems,
 in /usr/share/common-licenses/CC-BY-4.0.

License: OFL-1.1
 SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007.
 .
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of the Font Software, to use, study, copy, merge, embed, modify,
 redistribute, and sell modified and unmodified copies of the Font Software,
 subject to the conditions that neither the Font Software nor any of its
 individual components may be sold by itself, that the Font Software is
 distributed entirely under this licence and may not be released under any
 other licence, and that any derivative work must carry the same licence.
 .
 The Font Software is provided "as is", without warranty of any kind.
 .
 The complete text is available at http://scripts.sil.org/OFL and, on
 Debian systems, in /usr/share/common-licenses/OFL-1.1.

License: public-domain
 The time zone data and the TZif file layout header kept here are in the
 public domain.
 .
 tzfile.h was placed in the public domain on 1996-06-05 by Arthur David
 Olson, and the IANA time zone database is in the public domain.

License: CC0-1.0
 The Ahem font belongs to the public domain.  In jurisdictions that do not
 recognize public domain ownership of these files, the Creative Commons Zero
 declaration applies:
 http://labs.creativecommons.org/licenses/zero-waive/1.0/us/legalcode
 .
 On Debian systems the Creative Commons Zero 1.0 Universal waiver can be
 found in /usr/share/common-licenses/CC0-1.0.

License: SGI-B-2.0
 SGI FREE SOFTWARE LICENSE B (Version 2.0, Sept. 18, 2008)
 Copyright (C) [dates of first publication] Silicon Graphics, Inc.
 All Rights Reserved.
 .
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice including the dates of first publication and
 either this permission notice or a reference to
 http://oss.sgi.com/projects/FreeB/ shall be included in all copies or
 substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
 SILICON GRAPHICS, INC. BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY
 WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
 IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 .
 Except as contained in this notice, the name of Silicon Graphics, Inc. shall
 not be used in advertising or otherwise to promote the sale, use or other
 dealings in this Software without prior written authorization from Silicon
 Graphics, Inc.

License: Zlib
 This software is provided 'as-is', without any express or implied warranty.
 In no event will the authors be held liable for any damages arising from the
 use of this software.
 .
 Permission is granted to anyone to use this software for any purpose,
 including commercial applications, and to alter it and redistribute it
 freely, subject to the following restrictions:
 .
 1. The origin of this software must not be misrepresented; you must not
    claim that you wrote the original software.  If you use this software in a
    product, an acknowledgment in the product documentation would be
    appreciated but is not required.
 2. Altered source versions must be plainly marked as such, and must not be
    misrepresented as being the original software.
 3. This notice may not be removed or altered from any source distribution.

Files: flutter/third_party/skia/include/third_party/vulkan/*
Copyright: 2015-2026 The Khronos Group Inc.
License: Apache-2.0
Comment: Generated from the Khronos Vulkan API registry, not Skia's own.

Files: flutter/third_party/skia/src/sksl/GLSL.std.450.h
       flutter/third_party/skia/src/sksl/spirv.h
       flutter/third_party/vulkan-deps/spirv-cross/src/NonSemanticShaderDebugInfo100.h
Copyright: 2014-2016 The Khronos Group Inc.
           2018-2024 The Khronos Group Inc.
License: Khronos

Files: flutter/third_party/skia/third_party/freetype2/include/*
Copyright: 1996-2026 David Turner, Robert Wilhelm, and Werner Lemberg
License: FTL
Comment: Only Skia's two ftoption.h/ftmodule.h variants are kept, not FreeType.

Files: flutter/third_party/vulkan-deps/spirv-cross/src/GLSL.std.450.h
       flutter/third_party/vulkan-deps/spirv-cross/src/spirv.h
       flutter/third_party/vulkan-deps/spirv-cross/src/spirv.hpp
Copyright: 2014-2024 The Khronos Group Inc.
License: MIT

Files: flutter/third_party/vulkan-deps/spirv-cross/src/CODE_OF_CONDUCT.adoc
Copyright: 2016-2020 The Khronos Group Inc.
License: CC-BY-4.0

Files: third_party/abseil-cpp/absl/time/internal/cctz/src/tzfile.h
       third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/*
Copyright: 1987-1996 Arthur David Olson
License: public-domain

Files: flutter/third_party/dart/sdk/lib/_internal/js_dev_runtime/patch/bigint_patch.dart
       flutter/third_party/dart/sdk/lib/_internal/js_runtime/lib/bigint_patch.dart
       flutter/third_party/dart/sdk/lib/_internal/vm_shared/lib/bigint_patch.dart
Copyright: 2017 the Dart project authors
           2003-2005 Tom Wu
           2012 Adam Singer
License: BSD-3-Clause and MIT
Comment: The arithmetic these patches wrap is Tom Wu's Expat-licensed code.

Files: flutter/third_party/dart/runtime/tools/profiling/lib/src/pprof/profile.proto
Copyright: 2018 The Android Open Source Project
License: Apache-2.0

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 13 days ago.

Report◂

DFSG NEW review for flutter-engine version 3.47.5+ds1-2

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 1 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: 628 found (580 not listed by the scan, so not checked)

Licensing

The source is DFSG-compliant and debian/copyright (machine-readable DEP-5) accurately describes the tree. Every vendored component is matched by a specific Files stanza naming its primary copyright holder and correct licence (BSD-3-Clause for the Flutter engine and Skia, Apache-2.0 for BoringSSL/abseil/perfetto/wuffs/spirv-cross, MIT for json/inja/spring_animation/vulkan_memory_allocator, OFL-1.1 for Noto, CC0 for Ahem, public-domain for the IANA tzdata, and so on). No non-free terms were found: the scan's eight 'rare wording' hits are all API documentation or bundled licence texts, and there is no JSON 'Good, not Evil' clause, no CC-*-NC/-ND, and no non-commercial/no-modification licence. The 620 binary files are all test fixtures or data with clear provenance and are not installed into any binary package.

Packaging

The packaging is of high quality: a clean dh-style rules file building release/profile/debug via GN and ninja, sensible binary package split (embedder libraries, -dev, tools, font-subset, sky-engine, patched SDK, tester), DEP-3 patches with clear purposes and Forwarded headers, an autopkgtest smoke test for both embedders and the toolchain, a well-documented repack (README.source, assemble-orig.deps, get-orig-source.sh), and correct Build-Depends against the current clang-22/llvm-22 toolchain and Dart SDK. Standards-Version 4.7.4 is current. The only defect worth noting is the missing Multi-Arch: same on the shared-library and -dev packages.

Issues

minor packaging 1. libflutter-linux-gtk, libflutter-engine-embedder and their -dev packages lack Multi-Arch: same ◂
  • Files: debian/control:30, debian/control:39, debian/control:49, debian/control:56
  • Basis: checked, in the package or with a reference tool
  • Evidence: debian/libflutter-linux-gtk.install puts libflutter_linux_gtk.so in usr/lib/${DEB_HOST_MULTIARCH}, and debian/libflutter-engine-embedder.links puts a libflutter_engine.so symlink in usr/lib/${DEB_HOST_MULTIARCH}, yet none of the four packages declares a Multi-Arch field.
  • Problem: A shared library installed under /usr/lib/${DEB_HOST_MULTIARCH} must be co-installable across architectures (Policy 5.6.34.3) so that cross-compiling a Flutter application for a foreign architecture can link against the target's headers and libraries via the shipped pkg-config files. Without Multi-Arch: same, only one architecture of each package can be installed at a time, breaking multiarch cross-builds.
  • Fix: Add 'Multi-Arch: same' to the libflutter-linux-gtk, libflutter-linux-gtk-dev, libflutter-engine-embedder and libflutter-engine-embedder-dev binary package stanzas.
Verified ◂
  • Read debian/copyright in full (496 lines): it is DEP-5 (Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/), with a Files-Excluded/Files-Included repack manifest, a Files: * catch-all, and ~35 specific stanzas, plus full License paragraphs for BSD-3-Clause, Apache-2.0, MIT, Khronos, FTL, CC-BY-4.0, OFL-1.1, public-domain, CC0-1.0, SGI-B-2.0 and Zlib.
  • Read every file under debian/ (control, rules, changelog, patches/series, all 14 patches, source/format, tests/control and both tests, install/links/triggers/lintian-overrides, README.source, assemble-orig.deps, get-orig-source.sh, gbp.conf, clean, pc.in files, lrc.config, dart_package_config.json, upstream/metadata).
  • The eight 'rare wording' prescan hits are all false positives, not licence terms: flutter/lib/ui/semantics.dart:1842, flutter/third_party/skia/include/core/SkTextBlob.h:328 and third_party/abseil-cpp/absl/strings/cord.h:216 are API-behaviour comments ('must not be changed'/'immutable' refers to runtime object state); third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.h:36 'For private use only' is an internal-API comment; flutter/sky/packages/sky_engine/LICENSE:23929/24124 and flutter/tools/licenses_cpp/data/licenses/libturbojpeg.txt:13 quote the IJG (libjpeg) licence, which is free; flutter/third_party/skia/gn/gn_to_bp.py:71 merely lists 'CC-BY-NC' in a comment of licence identifiers the script filters out.
  • Grepped the whole tree (gitignore:false) for the JSON 'Good, not Evil' clause, non-commercial/noncommercial wording, and CC-BY-NC/BY-ND/NoDerivatives: no matches except the skia gn_to_bp.py comment above, so no non-free licence term is present (in particular the nlohmann JSON tree is the post-3.11 MIT version without the 'Good, not Evil' clause).
  • The 620 unrecognised binary files are all test data or fixtures, none installed by any debian/.install file: third_party/abseil-cpp/absl/time/internal/cctz/testdata/zoneinfo/** (~580 files, IANA tzdata, covered by the 'public-domain' stanza naming Arthur David Olson); flutter/shell/platform/fuchsia/flutter/tests/tzdata/2019a/44/le/metaZones.res, flutter/shell/platform/fuchsia/flutter/tests/tzdata/2019a/44/le/timezoneTypes.res and flutter/shell/platform/fuchsia/flutter/tests/tzdata/2019a/44/le/zoneinfo64.res (compiled ICU-format resource files, test fixtures for the Fuchsia platform's timezone handling); flutter/shell/platform/linux/testing/gschemas/ubuntu-20.04.compiled (compiled GSettings schema fixture whose provenance from Ubuntu gsettings-desktop-schemas is documented in the adjacent README.md); flutter/testing/android/native_activity/debug.keystore (standard Android debug keystore); flutter/testing/rules/.gradle/6.5/fileChanges/last-build.bin (Gradle build-cache artifact); flutter/third_party/dart/third_party/perfetto/src/** descriptor files and fuzzer corpora (protobuf/fuzz test inputs); flutter/third_party/vulkan-deps/spirv-cross/src/tests-other/.spv (compiled SPIR-V shaders, test data); the seven fonts under flutter/txt/third_party/fonts/ are licensed in the copyright (OFL-1.1, Apache-2.0, CC0-1.0).
  • The 211 'not named' copyright holders from dfsg-author-check are in bundled licence texts, not overlooked source files: the bulk are in flutter/sky/packages/sky_engine/LICENSE (a 29,844-line concatenation of third-party licence notices for the SDK, e.g. vulkan-validation-layers, fuchsia_sdk) and in flutter/tools/licenses_cpp/data/licenses/ and flutter/ci/licenses_golden/ fixtures; the handful in real source (e.g. Bjoern Hoehrmann in json serializer.hpp, Bradley Austin Davis in spirv_reflect.cpp, Brian Smith in boringssl montgomery_inv.cc.inc) are contributors to projects whose primary holder each stanza already names, and their embedded snippets carry the same or a compatible licence.
  • Spot-checked the repack: Files-Excluded paths are genuinely absent (e.g. flutter/third_party/json has no tests/, docs/, cmake/, single_include/, LICENSES/; boringssl/src has no fuzz/, tool/, decrepit/; vulkan_memory_allocator has no src/, docs/, bin/), and the one Files-Included file (googletest gtest_prod.h) is matched by the googletest stanza.
  • Build-Depends checked with apt-cache: clang-22, lld/llvm-22, generate-ninja, dart-sdk 3.13.4+dfsg1-6, dart-args and dart-path all exist in the archive; libre2-dev and libbenchmark-dev are correctly absent because the re2/benchmark shims are only pulled in by licenses_cpp and benchmark targets that debian/rules never builds (it names only gen_snapshot, impellerc, font-subset, libpath_ops.so, flutter_embedder.h, frontend_server_aot and flutter_tester).
  • uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 3.47.8, packaged 3.47.5+ds1), which is not a fault of the package.
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0, CC-BY-4.0, CC0-1.0, OFL-1.1).
Not confirmed ◂
  • dart-kernel-compiler (Build-Depends, and named in patch 0012 and debian/rules as the source of compile_platform_aot.dart.snapshot) is not in the package lists and is not among the uploads in ftp-master's NEW queue as of 2026-10-25; it is very likely a new companion package to dart-sdk accepted since the lists were refreshed, and its absence alone is not treated as a fault.
  • The two text files over 4 MiB (only their first 4 MiB were scanned) were not fully re-read; both are licence/bundled-data dumps (flutter/sky/packages/sky_engine/LICENSE is one of them) already characterised above.
Proposed changes ◂

None.

Review Information

accepted — allocated to awm 13 days ago, started 13 days ago, completed 13 days ago.

Final Comment

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
3.47.5+ds1-1 b7e885bb… 2026-10-21 08:37 2026-10-21 08:39 awm accepted VIEW

Back to Dashboard | View all reviews for this package