pub.dev API

Base URL

https://pub.dev/api

Authentication

Read endpoints are public and unauthenticated. Publishing requires OAuth, which is unrelated to anything documented here.

Rate limit

Not published. pub.dev asks that clients send an identifying User-Agent and avoid unnecessary polling.

Pricing

Free. The registry is operated by Google as part of the Dart ecosystem.

CORS

Enabled — callable directly from browser JavaScript

Official docs

Read the docs

Every request below was executed against the live API on 21 Aug 2026, and the response shown is the real body it returned — not an illustration.

curl 'https://pub.dev/api/packages/http'

const res = await fetch("https://pub.dev/api/packages/http");
if (!res.ok) throw new Error(`Request failed: ${res.status}`);
const data = await res.json();
console.log(data);

import requests

res = requests.get("https://pub.dev/api/packages/http", timeout=20)
res.raise_for_status()
print(res.json())

{
  "name": "http",
  "latest": {
    "version": "1.6.0",
    "pubspec": {
      "name": "http",
      "version": "1.6.0",
      "description": "A composable, multi-platform, Future-based API for HTTP requests.",
      "repository": "https://github.com/dart-lang/http/tree/master/pkgs/http",
      "topics": [
        "http",
        "network",
        "protocols"
      ],
      "environment": {
        "sdk": "^3.4.0"
      },
      "dependencies": {
        "async": "^2.5.0",
        "http_parser": "^4.0.0",
        "meta": "^1.3.0",
        "web": ">=0.5.0 <2.0.0"
      },
      "dev_dependencies": {
        "dart_flutter_team_lints": "^3.0.0",
        "fake_async": "^1.2.0",
        "http_client_conformance_tests": {
          "path": "../http_client_conformance_tests/"
        },
        "shelf": "^1.1.0",
        "stream_channel": "^2.1.1",
        "test": "^1.21.2"
      }
    },
    "archive_url": "https://pub.dev/api/archives/http-1.6.0.tar.gz",
    "archive_sha256": "87721a4a50b19c7f1d49001e51409bddc46303966ce89a65af4f4e6004896412",
    "published": "2025-11-10T18:27:56.434747Z"
  },
  "versions": [
    {
      "version": "0.2.7+0",
      "pubspec": {
        "dependencies": {
          "unittest": null
        },
        "name": "http",
        "version": "0.2.7+0",
        "description": "A composable, Future-based API for making HTTP requests."
      },
      "archive_url": "https://pub.dev/api/archives/http-0.2.7%2B0.tar.gz",
      "archive_sha256": "cc4fedb40b3c48d1a7558fcfe8d0f479046f017337d7b6b883208d65dbf8724d",
      "published": "2012-11-30T20:40:39.500320

namestring

Canonical package name, lowercase with underscores. Package names are case-insensitive on lookup but canonical in responses.

latest.versionstring

The current release. Always prefer this to the last element of `versions`.

latest.pubspecobject

The complete pubspec for that release: `description`, `repository`, `topics`, `environment` SDK constraint, `dependencies` and `dev_dependencies`.

latest.pubspec.environment.sdkstring

The Dart SDK constraint, such as `^3.4.0`. This is the field to check for compatibility before upgrading.

latest.archive_urlstring

Direct download URL for the `.tar.gz` package archive.

latest.archive_sha256string

SHA-256 of the archive. Use it to verify a downloaded or mirrored copy.

latest.publishedstring

ISO 8601 publication timestamp with microsecond precision.

versionsarray

Every published version, oldest first and ordered by publication rather than by semver. Each element repeats the same structure as `latest`.

• Check whether a Flutter dependency has a newer release before upgrading
• Verify the SHA-256 of a cached package archive in an air-gapped build
• Read a package's SDK constraint to decide whether it supports your Dart version
• Build a dependency dashboard for a Flutter monorepo
• Detect packages that have not published a release in a long time

If pub.dev does not fit, these developer & testing apis cover similar ground. Every one was called before publishing, and each links to its own reference page with a working curl command and the response it returned.