secure_pubspec_urls

The '{0}' protocol shouldn't be used because it isn't secure.

The analyzer produces this diagnostic when a URL in a pubspec.yaml file is using a non-secure scheme, such as http.

The following code produces this diagnostic because the pubspec.yaml file contains an http URL:

dependencies:
  example: any
    repository: http://github.com/dart-lang/example

Change the scheme of the URL to use a secure scheme, such as https:

dependencies:
  example: any
    repository: https://github.com/dart-lang/example

除非另有说明，文档之所提及适用于 Dart 3.7.3 版本，本页面最后更新时间: 2025-05-08。 查看文档源码 或者 报告页面问题。