There are two types of third-party dependencies in the Fuchsia tree:
Pub dependencies are host at
//third-party/dart-pkg. That project is regularly kept up-to-date with a script that relies on the
pub tool to resolve versions and fetch sources for the packages that are used in the tree. This script uses a set of canonical local packages which are assumed to be providing the necessary package coverage for the entire tree.
Additionally, projects may request third-party dependencies to be imported through the following procedure:
dart_dependencies.yamlfile in the project
name: my_project dependencies: foo: ^4.0.0 bar: >=0.1.0