I analysed the 162 most popular Dart packages. 59% of what a scanner would flag never runs in your app.

I maintain capdrift, a tool that reads a Dart package and reports what it is

able to do. I ran it across the 162 most-downloaded packages on pub.dev and

kept the raw output. Here is what is actually in there.

Method: capdrift inspect <pkg> --format json against each package's latest

version, resolved AST rather than regex, no code executed. 162 packages, 1,805