Skip to content

Support privacy manifests for non-plugin packages calling required reason APIs directly via FFI #147186

@stuartmorgan-g

Description

@stuartmorgan-g

We have a privacy manifest system in place for plugins that allows plugin developers to declare required reason API usage. However, I didn't consider the case of a non-plugin, pure-Dart package that uses FFI to directly call required reason APIs; we should have a way for packages doing that to declare a manifest and have it bundled into App.framework.

We could probably do this in the Flutter tool, by having it create privacy manifest bundles in App.framework (like what Cocoapods does for static linking). We'd need a way for package developers to declare a manifest that we would bundle; probably a flutter: sub-entry in pubspec.yaml is the best option?

In the meantime, the workaround for this (hopefully very rare) case would be either:

  • As the package developer, declare your package as a plugin instead—the native code can be essentially a no-op—and use the podspec (or later, SPM) to bundle a manifest.
  • As an app developer, include the reasons at the app level.

Metadata

Metadata

Assignees

No one assigned

    Labels

    P2Important issues not at the top of the work lista: buildBuilding flutter applications with the toolteam-iosOwned by iOS platform teamtoolAffects the "flutter" command-line tool. See also t: labels.triaged-iosTriaged by iOS platform team

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions