# Build Securely in Dart and Flutter with Sonatype

Sonatype supports the [Dart programming language](https://dart.dev/) and [Flutter framework](https://flutter.dev/), giving development teams the tools they need to build secure, high-performance cross-platform applications with confidence.

.png?width=1968&height=2893&name=Header-LR-Gray-(RIGHT).png)

.png?width=1467&height=2893&name=Header-LR-Gray-(LEFT).png)

## Using Dart and Flutter in App Development

Dart and Flutter have emerged as a powerful duo in the modern programming landscape, offering a streamlined path to building high-performance applications across mobile, web, and desktop — all from a single codebase. Flutter’s native performance and Dart’s developer-friendly syntax have made them especially popular in mobile banking and financial applications. While Dart adoption continues to grow globally, we are seeing increased usage outside of North America, particularly among large enterprises focused on cross-platform delivery at scale.

## Supported Dart Features

### Flutter Project File Support

Support for pubspec.yaml and pubspec.lock manifest files

### Remediate Vulnerabilities

Identification and remediation of vulnerabilities in Dart packages

### Enforce Policies

Automated policy enforcement based on package metadata

### Parse Natively

Native parsing of Dart advisories from public sources

### Build in All Applications

Compatible with Dart and Flutter mobile, web, and desktop applications

### Private Package Repository Support

Support for private Dart registries hosted via [pub.dev](https://pub.dev/)

## Build More Advanced Native Applications

With Sonatype’s native support for the Dart language and Flutter framework, your team can deliver secure applications faster — without sacrificing performance or productivity. Leverage the full power of our [software composition analysis (SCA)](/content/products/open-source-security-dependency-management/index.html) to secure cross-platform mobile apps, mitigate risk, and streamline development workflows.

- ### Vulnerability Management
  
Secure Dart and Flutter [dependencies](/content/blog/software-dependencies-a-beginners-guide/index.html)

- ### Policy Enforcement
  
Automate open source governance

- ### Native Integration
  
Works with Sonatype IQ solutions

## Integration Resources

+

### Sonatype Help Documentation: Dart and Flutter Analysis

[See Documentation](https://help.sonatype.com/en/dart-and-flutter-analysis.html)

+

### Sonatype Help Documentation: Added Support for Dart and Flutter Analysis

[See Documentation](https://help.sonatype.com/en/sonatype-iq-server-191-release-notes.html#added-support-for-dart-and-flutter-analysis)

## Frequently Asked Questions

### What is the difference between pubspec.yaml and pubspec.lock?

pubspec.yaml defines which packages your app depends on. pubspec.lock captures the exact versions of those dependencies to ensure consistent builds and avoid unexpected updates.

### Where can I find Dart and Flutter packages?

The official repository is [pub.dev](https://pub.dev/), which hosts verified packages for use with Dart and Flutter applications.

### Does Dart replace JavaScript?

No. Dart doesn’t replace JavaScript but offers an alternative for cross-platform mobile development. It has gained popularity over React Native for many mobile-first applications due to Flutter’s performance and simplicity.