PkgRadar

Pub (Dart) · pub.dev

flutter_gemma

Dart Process Http Combo: Process spawn paired with HTTP fetch — typical fetch-and-run shape.

Why PkgRadar flagged 0.16.4

SeveritySignalEvidence
mediumDart Process Http ComboProcess spawn paired with HTTP fetch — typical fetch-and-run shape. · hook/build.dart
mediumRemote Payloadmatched "github.com/DenisovAV/flutter_gemma/releases/download" · hook/build.dart

Scanned versions

VersionVerdictScoreScanned (UTC)
0.16.4Review302026-06-03
0.16.3Review302026-05-30
0.16.2Review302026-05-29

Block this in CI

PkgRadar gates flutter_gemma (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pub [email protected]