I analysed the 162 most popular Dart packages. 59% of what a scanner would flag never runs in your app.

I maintain capdrift, a tool that reads a Dart package and reports what it is able to do. I ran it across the 162 most-downloaded packages on pub.dev and kept the raw output. Here is what is actually in there. Method: capdrift inspect <pkg> --format json against each package's latest version, resolved AST rather than regex, no code executed.... Weiterlesen