frostdart submodule -> native assets migration
What the developer wrote
Authored by Julian
frostdart submodule -> native assets migration
What changed, and why it matters
This commit changes how the app pulls in a supporting cryptography library called frostdart. Previously it was included as a local submodule; now it is fetched directly from its GitHub repository at a specific commit. There is nothing in the commit that fixes, introduces, or discusses a security vulnerability. It is a routine build/dependency plumbing change.
No security action required. Treat as a normal dependency migration; verify the pinned ref and version bump in routine dependency review.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit migrates the frostdart dependency from a Git submodule (crypto_plugins/frostdart) to a Dart native-assets/git dependency. .gitmodules removes the submodule entry, pubspec.lock updates frostdart from a local path source (version 0.2.0) to a git source pinned at ref 3397cf62f30f1467aea781c23d84051441775f14 (version 0.3.0), and the pubspec.template.yaml is updated accordingly. No source code logic is modified.
Changed components
dependency management configurationfrostdart integrationInspect captured patch +9 / −9
diff --git a/.gitmodules b/.gitmodules
index d9a561c..da71576 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,6 +1,3 @@
[submodule "crypto_plugins/flutter_libepiccash"]
path = crypto_plugins/flutter_libepiccash
url = https://github.com/cypherstack/flutter_libepiccash.git
-[submodule "crypto_plugins/frostdart"]
- path = crypto_plugins/frostdart
- url = https://github.com/cypherstack/frostdart
diff --git a/pubspec.lock b/pubspec.lock
index 3d96b19..7bc6867 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -1223,10 +1223,12 @@ packages:
frostdart:
dependency: "direct main"
description:
- path: "crypto_plugins/frostdart"
- relative: true
- source: path
- version: "0.2.0"
+ path: "."
+ ref: "3397cf62f30f1467aea781c23d84051441775f14"
+ resolved-ref: "3397cf62f30f1467aea781c23d84051441775f14"
+ url: "https://github.com/cypherstack/frostdart.git"
+ source: git
+ version: "0.3.0"
fuchsia_remote_debug_protocol:
dependency: transitive
description: flutter
diff --git a/scripts/app_config/templates/pubspec.template.yaml b/scripts/app_config/templates/pubspec.template.yaml
index 954201c..fb2d568 100644
--- a/scripts/app_config/templates/pubspec.template.yaml
+++ b/scripts/app_config/templates/pubspec.template.yaml
@@ -26,7 +26,9 @@ dependencies:
# %%ENABLE_FROST%%
# frostdart:
-# path: ./crypto_plugins/frostdart
+# git:
+# url: https://github.com/cypherstack/frostdart.git
+# ref: 3397cf62f30f1467aea781c23d84051441775f14
# %%END_ENABLE_FROST%%
# %%ENABLE_XEL%%
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.