DFSG NEW review for flutter version 3.47.5+ds1-1

Summary

• Licensing is DFSG-compliant and debian/copyright is accurate: Yes
• Packaging is of good quality: Yes
• Issues: 0 blocker, 0 important, 1 minor
• debian/watch: version 5
• debian/copyright: machine-readable
• Scan before the review: nothing found

Licensing

The whole tree is BSD-3-Clause under the single holder "The Flutter Authors"; every real copyright header reads "Copyright 2014 The Flutter Authors. All rights reserved." and no other licence (MIT, Apache, GPL/LGPL, MPL, ISC, CC, public-domain) or holder appears anywhere in the source. debian/copyright is DEP-5, covers everything with Files: * plus a debian/* override, and carries the full BSD-3-Clause text, so the licence is DFSG-free and the file is accurate. The one discrepancy is cosmetic but real: the reproduced licence text in debian/copyright says "Google LLC" where the shipped LICENSE says "Google Inc.".

Packaging

Straightforward pure-Dart packaging: compat 14 with dh $@, arch:all/Multi-Arch: foreign, a sensible two-way split into flutter and flutter-web-plugins, correct versioned Depends on the dart-* library packages, one autopkgtest, DEP-5 copyright, Vcs-* and upstream/metadata present, Standards-Version 4.7.4 (current Policy is 4.7.4.1). Files-Excluded paths are genuinely absent from the tree. I found nothing a sponsor would require to be changed.

Issues

1. [minor] [licensing] debian/copyright reproduces the BSD-3-Clause text with "Google LLC" where the shipped licence says "Google Inc."

• Files: debian/copyright, LICENSE
• Basis: checked, in the package or with a reference tool
• Evidence: debian/copyright License: BSD-3-clause stanza: * Neither the name of Google LLC nor the names of its / contributors may be used to endorse...; the file it reproduces, LICENSE:9 (and packages/flutter/LICENSE), reads * Neither the name of Google Inc. nor the names of its.
• Problem: A stand-alone License paragraph must reproduce the licence verbatim (copyright-format 1.0 section 5.3; Policy 12.5). Substituting the entity in the non-endorsement clause makes the reproduced text differ from the licence the files are actually under, so debian/copyright does not quote the licence exactly as the upstream authors wrote it.
• Fix: Change Google LLC to Google Inc. in the License: BSD-3-clause paragraph so it matches LICENSE, or, if the rename is intentional, keep the verbatim text and add a Comment: noting it.

Verified

• Read debian/ in full: control, rules, changelog, copyright, source/format, tests/control, tests/smoke, flutter.install, flutter-web-plugins.install, gbp.conf, upstream/metadata.
• All source files carry Copyright 2014 The Flutter Authors. All rights reserved. with a BSD-3-Clause body; no copyright line names any holder other than the Flutter Authors, and a grep for Copyright 20(?!14) over packages/ returns only the doc-comment example below.
• Prescan entry "The Sample Authors" (packages/flutter/lib/src/foundation/licenses.dart:85) is inside a /// {@tool snippet} code example that illustrates how to encode a BSD licence for the LicenseRegistry API (lines 85-104); it is documentation, not a real copyright holder, so no stanza is needed.
• Prescan found no built artifacts, archives, minified JS/CSS, bytecode, .so/.jar or fonts; the only non-source files are the example app's small PNG icons/favicon under packages/integration_test/example (android/ios/web launcher assets) and JSON/YAML/Markdown data, all Flutter's own template assets covered by Files: *; the generated Dart files present (e.g. packages/flutter_localizations/lib/src/l10n/generated_material_localizations.dart) have their generator input (.arb files) shipped alongside.
• Files-Excluded paths are genuinely absent: no third_party, engine, dev, docs, examples, bin, buildtools, agent-artifacts, packages/flutter_tools, .github/.vscode/.direnv/.claude/.agents/.gemini, or top-level README.md/pubspec.yaml/.gitignore anywhere in the tree.
• debian/copyright is DEP-5 with the correct Format URL, Files: * catch-all and a later debian/* override; BSD-3-Clause is not in /usr/share/common-licenses, and the full text is included.
• Depends of flutter (dart-characters, dart-collection, dart-meta, dart-material-color-utilities, dart-vector-math, sky-engine) match the packages actually imported by packages/flutter/lib; a grep of ^import 'package: there shows only meta, collection, vector_math and material_color_utilities. dart-meta 1.19.0 and dart-collection 1.19.1 in the archive satisfy the versioned constraints.
• The autopkgtest Depends: @, dart-sdk, ... expands @ to both binaries of the source (autopkgtest spec, "@ stands for the package(s) generated by the source package"), so the smoke test's package:flutter_web_plugins import is satisfied; Restrictions: allow-stderr is set.
• uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 3.47.8, packaged 3.47.5+ds1), which is not a fault of the package.

Not confirmed

• sky-engine, dart-characters, dart-material-color-utilities and dart-vector-math are not in the reviewing system's package lists nor in ftp-master's NEW queue; they are plausibly new dart-team packages (dart-meta and dart-collection, by the same maintainer, are present), so this is not reported as a missing dependency.
• debian/tests/smoke could not be run; whether it is executable in the tarball could not be checked from the reviewed tree.

Proposed changes

None.