When initializing/configuring FlutterFire a firebase_options.dart file is created at the root of /lib. This file contains api keys for android, ios, web, and whatever channels you may be using. Are these public keys that can go into a repo or private and should not be committed to a repo? There are no details on FlutterFire and to have this created in /lib seems to suggest these are public keys.