Feature request: lint about imports not in your direct dependencies

[sigurdm]

pub publish will bark at you if you try to publish with an import from a transitive dependency.

But it would be nice to get an upfront alert from a lint that you are importing from a package that is not in the direct dependencies in your pubspec.yaml.

[bwilkerson]

I like that idea.

On a related note, we've talked in the past about having a lint to check for imports inside lib of packages that are only in the dev dependencies. Not sure whether we want one rule that does both or two separate rules.

@pq

[pq]

👍

See these lint requests (w/ discussion): #57175 and #57176.