> the widgets/ package is supposed to be pulled in by pub get

That sounds right, so I'm not sure what's failing. The deploy step was failing without this addition; it'd be worth a TODO and a follow up -