Repository navigation
CRITICAL: Incorrect package content for v9.1.0 served from pub.dev - Verified in UAE and UK #358
Description
"We are experiencing a critical issue where pub.dev is serving incorrect package content for flutter_foreground_task version 9.1.0."
"Initially, this was observed in Dubai, UAE. The downloaded flutter_foreground_task-9.1.0.tar.gz has an SHA-256 hash of 9F1B25A81DB95D7119D2C5CFFC654048CBDD49D4056183E1BEADC1A6A38F3E29."
"This hash corresponds to code from an older version (appears to be v3.10.0 or similar), not v9.1.0, leading to API mismatches (e.g., missing printDevLog in init)."
"Crucially, a friend in the UK has also downloaded the package from pub.dev today ([8/12/2025]) and sent the file to me, and when I checked the SHA-256 hash it is the exact same incorrect SHA-256 hash: 9F1B25A81DB95D7119D2C5CFFC654048CBDD49D4056183E1BEADC1A6A38F3E29."
"The expected SHA-256 hash for the correct v9.1.0 (verified by other developers in different regions previously, or by checking older, correctly cached versions if available) is F15A8501865048A092829281A18277C0879007808269A94018698991738D1847."
"This indicates a widespread problem with the distribution of flutter_foreground_task v9.1.0 on pub.dev, potentially affecting multiple regions or even being a global issue with the uploaded package itself."
"This prevents users from utilizing the correct version and is causing build failures. Please investigate urgently with the pub.dev team."
Activity
wediabdat2-source commentedon Aug 13, 2025
Further investigation shows that the code being served by pub.dev for flutter_foreground_task v9.1.0 appears to be from a much older version, similar to the v3.x.x or v4.x.x API. For example, the init method signature matches older versions (no printDevLog parameter), and the way notification options are handled is static. This can be seen in the code at this unofficial fork which seems to mirror the incorrect content: https://github.com/tentenponce/flutter_foreground_task_9.1.0/blob/master/lib/flutter_foreground_task.dart. This is not the expected API for v9.1.0.
makoConstruct commentedon Sep 16, 2025
Seems resolved, I'm currently seeing
version: 9.1.0in the pubspec.yaml for the version that my project fetched. It's possible it's worth mentioning I got it viaflutter_foreground_task: ^9.1.0(note the^)? a search of the github finds no occurrences of 'printDevLog' in the current codebase.