Working dependency inventory derived from the current app and backend manifests, updated March 21, 2026.
This page reflects the direct dependencies currently declared in the Flutter app and Python backend manifests in this workspace. It is a working notice page and should be regenerated whenever those manifests change.
psycopg2-binary appears in the backend snapshot as LGPL with exceptions and should be explicitly reviewed before backend dependency changes ship.flutter_localizations and flutter_test rely on Flutter SDK notice verification because the previous scan did not find separate local license metadata.Direct dependencies declared in pling_app/pubspec.yaml.
| Package | Version | Scope | License | Source | Review note |
|---|---|---|---|---|---|
| csv | 6.0.0 | direct-main | See local license file | https://github.com/close2/csv | Local file: LICENSE |
| cupertino_icons | 1.0.8 | direct-main | See local license file | https://github.com/flutter/packages/tree/main/third_party/packages/cupertino_icons | Local file: LICENSE |
| dio | 5.9.0 | direct-main | See local license file | https://github.com/cfug/dio | Local file: LICENSE |
| fl_chart | 0.68.0 | direct-main | See local license file | https://flchart.dev/ | Local file: LICENSE |
| flutter | 0.0.0 | direct-main | See local license file | https://flutter.dev | Local file: LICENSE |
| intl | any | direct-main | See package metadata | https://pub.dev/packages/intl | Manifest constraint from current pubspec |
| flutter_local_notifications | 17.2.4 | direct-main | See local license file | https://github.com/MaikuB/flutter_local_notifications/tree/master/flutter_local_notifications | Local file: LICENSE |
| flutter_localizations | 0.0.0 | direct-main | Unknown | Unavailable | No local LICENSE file found |
| flutter_map | 7.0.2 | direct-main | See local license file | https://github.com/fleaflet/flutter_map | Local file: LICENSE |
| flutter_native_splash | 2.4.7 | direct-main | See local license file | https://github.com/jonbhanson/flutter_native_splash | Local file: LICENSE |
| flutter_riverpod | 3.2.0 | direct-main | See local license file | https://riverpod.dev | Local file: LICENSE |
| flutter_secure_storage | 10.0.0 | direct-main | See local license file | https://github.com/mogol/flutter_secure_storage/tree/develop/flutter_secure_storage | Local file: LICENSE |
| flutter_timezone | 5.0.1 | direct-main | See local license file | https://github.com/tjarvstrand/flutter_timezone | Local file: LICENSE |
| geocoding | 3.0.0 | direct-main | See local license file | https://github.com/baseflow/flutter-geocoding/tree/main/geocoding | Local file: LICENSE |
| geolocator | 13.0.4 | direct-main | See local license file | https://github.com/baseflow/flutter-geolocator/tree/main/geolocator | Local file: LICENSE |
| go_router | 17.0.1 | direct-main | See local license file | https://github.com/flutter/packages/tree/main/packages/go_router | Local file: LICENSE |
| http | 1.6.0 | direct-main | See local license file | https://github.com/dart-lang/http/tree/master/pkgs/http | Local file: LICENSE |
| http_parser | 4.1.2 | direct-main | See local license file | https://github.com/dart-lang/http/tree/master/pkgs/http_parser | Local file: LICENSE |
| image_picker | 1.2.1 | direct-main | See local license file | https://github.com/flutter/packages/tree/main/packages/image_picker/image_picker | Local file: LICENSE |
| jwt_decode | 0.3.1 | direct-main | See local license file | https://github.com/sidsbrmnn/jwt_decode | Local file: LICENSE |
| latlong2 | 0.9.1 | direct-main | See local license file | https://github.com/jifalops/dart-latlong | Local file: LICENSE |
| package_info_plus | 8.3.1 | direct-main | See local license file | https://github.com/fluttercommunity/plus_plugins | Local file: LICENSE |
| path_provider | 2.1.5 | direct-main | See local license file | https://github.com/flutter/packages/tree/main/packages/path_provider/path_provider | Local file: LICENSE |
| shared_preferences | 2.5.4 | direct-main | See local license file | https://github.com/flutter/packages/tree/main/packages/shared_preferences/shared_preferences | Local file: LICENSE |
| timezone | 0.9.4 | direct-main | See local license file | https://github.com/srawlins/timezone | Local file: LICENSE |
| webview_flutter | 4.13.1 | direct-main | See local license file | https://github.com/flutter/packages/tree/main/packages/webview_flutter/webview_flutter | Local file: LICENSE |
| flutter_launcher_icons | 0.14.4 | direct-dev | See local license file | https://github.com/fluttercommunity/flutter_launcher_icons | Local file: LICENSE |
| flutter_lints | 6.0.0 | direct-dev | See local license file | https://github.com/flutter/packages/tree/main/packages/flutter_lints | Local file: LICENSE |
| flutter_test | 0.0.0 | direct-dev | Unknown | Unavailable | No local LICENSE file found |
Direct runtime and development dependencies declared in pling-server/pyproject.toml.
| Package | Version | Scope | License | Source | Review note |
|---|---|---|---|---|---|
| alembic | 1.17.2 | direct-main | MIT | https://alembic.sqlalchemy.org | Metadata file: LICENSE |
| asyncpg | 0.30.0 | direct-main | Apache License, Version 2.0 | https://github.com/MagicStack/asyncpg | Metadata file: LICENSE |
| bcrypt | 5.0.0 | direct-main | Apache-2.0 | https://github.com/pyca/bcrypt/ | Metadata file: LICENSE |
| fastapi | 0.121.3 | direct-main | MIT | https://github.com/fastapi/fastapi | Metadata file: LICENSE |
| google-cloud-storage | 3.9.0 | direct-main | Apache 2.0 | https://github.com/googleapis/python-storage | Metadata file: LICENSE |
| greenlet | 3.2.4 | direct-main | MIT AND Python-2.0 | https://greenlet.readthedocs.io/ | Metadata file: LICENSE |
| httpx | 0.28.1 | direct-main | BSD-3-Clause | https://github.com/encode/httpx | No License-File entry in METADATA |
| litellm | 1.81.13 | direct-main | MIT | https://litellm.ai | No License-File entry in METADATA |
| passlib | 1.7.4 | direct-main | BSD | https://passlib.readthedocs.io | No License-File entry in METADATA |
| psycopg2-binary | 2.9.11 | direct-main | LGPL with exceptions | https://psycopg.org/ | Metadata file: LICENSE |
| pydantic | 2.12.4 | direct-main | MIT | https://github.com/pydantic/pydantic | Metadata file: LICENSE |
| pydantic-settings | 2.12.0 | direct-main | MIT | https://github.com/pydantic/pydantic-settings | Metadata file: LICENSE |
| python-jose | 3.5.0 | direct-main | MIT | https://github.com/mpdavis/python-jose/ | Metadata file: LICENSE |
| python-multipart | 0.0.20 | direct-main | Apache-2.0 | https://github.com/Kludex/python-multipart | Metadata file: LICENSE.txt |
| SQLAlchemy | 2.0.44 | direct-main | MIT | https://docs.sqlalchemy.org | Metadata file: LICENSE |
| uvicorn | 0.38.0 | direct-main | BSD-3-Clause | https://uvicorn.dev/ | Metadata file: LICENSE.md |
| pytest | 9.0.2 | direct-dev | MIT | https://docs.pytest.org/en/latest/ | Metadata file: LICENSE |
Before each store submission, confirm this page still matches the latest app and backend manifests. The release workflow and review checklist live in docs/compliance/open-source-license-workflow.md.