Gathering detailed insights and metrics for @capacitor/camera
Gathering detailed insights and metrics for @capacitor/camera
Installations
npm install @capacitor/cameraDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
20.18.1
NPM Version
lerna/7.4.2/node@v20.18.1+arm64 (darwin)
Releases
1,380
@capacitor/dialog@7.0.1
@capacitor/dialog@7.0.1
Updated on Apr 02, 2025
@capacitor/screen-orientation@7.0.1
@capacitor/screen-orientation@7.0.1
Updated on Apr 02, 2025
@capacitor/camera@7.0.1
@capacitor/camera@7.0.1
Updated on Apr 02, 2025
@capacitor/status-bar@7.0.1
@capacitor/status-bar@7.0.1
Updated on Apr 02, 2025
@capacitor/toast@7.0.1
@capacitor/toast@7.0.1
Updated on Apr 02, 2025
@capacitor/haptics@7.0.1
@capacitor/haptics@7.0.1
Updated on Apr 02, 2025
Languages
7
Java
Swift
TypeScript
JavaScript
Ruby
Objective-C
Shell
Java (44.71%)
Swift (26.29%)
TypeScript (22.5%)
JavaScript (2.4%)
Ruby (1.72%)
Objective-C (1.65%)
Shell (0.74%)
Developer
ionic-team
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
601 Stars
931 Commits
641 Forks
30 Watchers
29 Branches
91 Contributors
Updated on Jul 10, 2025
Maintainers
11
Package Meta Information
Latest Version
7.0.1
Package Id
@capacitor/camera@7.0.1
Unpacked Size
250.56 kB
Size
44.30 kB
File Count
34
NPM Version
lerna/7.4.2/node@v20.18.1+arm64 (darwin)
Node Version
20.18.1
Published on
Apr 02, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
@capacitor/camera
The Camera API provides the ability to take a photo with the camera or choose an existing one from the photo album.
Install
1npm install @capacitor/camera 2npx cap sync
iOS
iOS requires the following usage description be added and filled out for your app in Info.plist:
NSCameraUsageDescription(Privacy - Camera Usage Description)NSPhotoLibraryAddUsageDescription(Privacy - Photo Library Additions Usage Description)NSPhotoLibraryUsageDescription(Privacy - Photo Library Usage Description)
Read about Configuring Info.plist in the iOS Guide for more information on setting iOS permissions in Xcode
Android
When picking existing images from the device gallery, the Android Photo Picker component is now used. The Photo Picker is available on devices that meet the following criteria:
- Run Android 11 (API level 30) or higher
- Receive changes to Modular System Components through Google System Updates
Older devices and Android Go devices running Android 11 or 12 that support Google Play services can install a backported version of the photo picker. To enable the automatic installation of the backported photo picker module through Google Play services, add the following entry to the <application> tag in your AndroidManifest.xml file:
1<!-- Trigger Google Play services to install the backported photo picker module. --> 2<!--suppress AndroidDomInspection --> 3<service android:name="com.google.android.gms.metadata.ModuleDependencies" 4 android:enabled="false" 5 android:exported="false" 6 tools:ignore="MissingClass"> 7 <intent-filter> 8 <action android:name="com.google.android.gms.metadata.MODULE_DEPENDENCIES" /> 9 </intent-filter> 10 <meta-data android:name="photopicker_activity:0:required" android:value="" /> 11</service>
If that entry is not added, the devices that don't support the Photo Picker, the Photo Picker component fallbacks to Intent.ACTION_OPEN_DOCUMENT.
The Camera plugin requires no permissions, unless using saveToGallery: true, in that case the following permissions should be added to your AndroidManifest.xml:
1<uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE"/> 2<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
You can also specify those permissions only for the Android versions where they will be requested:
1<uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" android:maxSdkVersion="32"/> 2<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" android:maxSdkVersion="29"/>
The storage permissions are for reading/saving photo files.
Read about Setting Permissions in the Android Guide for more information on setting Android permissions.
Additionally, because the Camera API launches a separate Activity to handle taking the photo, you should listen for appRestoredResult in the App plugin to handle any camera data that was sent in the case your app was terminated by the operating system while the Activity was running.
Variables
This plugin will use the following project variables (defined in your app's variables.gradle file):
androidxExifInterfaceVersion: version ofandroidx.exifinterface:exifinterface(default:1.3.7)androidxMaterialVersion: version ofcom.google.android.material:material(default:1.12.0)
PWA Notes
PWA Elements are required for Camera plugin to work.
Example
1import { Camera, CameraResultType } from '@capacitor/camera'; 2 3const takePicture = async () => { 4 const image = await Camera.getPhoto({ 5 quality: 90, 6 allowEditing: true, 7 resultType: CameraResultType.Uri 8 }); 9 10 // image.webPath will contain a path that can be set as an image src. 11 // You can access the original file using image.path, which can be 12 // passed to the Filesystem API to read the raw data of the image, 13 // if desired (or pass resultType: CameraResultType.Base64 to getPhoto) 14 var imageUrl = image.webPath; 15 16 // Can be set to the src of an image now 17 imageElement.src = imageUrl; 18};
API
getPhoto(...)
1getPhoto(options: ImageOptions) => Promise<Photo>
Prompt the user to pick a photo from an album, or take a new photo with the camera.
| Param | Type |
|---|---|
options | ImageOptions |
Returns: Promise<Photo>
Since: 1.0.0
pickImages(...)
1pickImages(options: GalleryImageOptions) => Promise<GalleryPhotos>
Allows the user to pick multiple pictures from the photo gallery. On iOS 13 and older it only allows to pick one picture.
| Param | Type |
|---|---|
options | GalleryImageOptions |
Returns: Promise<GalleryPhotos>
Since: 1.2.0
pickLimitedLibraryPhotos()
1pickLimitedLibraryPhotos() => Promise<GalleryPhotos>
iOS 14+ Only: Allows the user to update their limited photo library selection. On iOS 15+ returns all the limited photos after the picker dismissal. On iOS 14 or if the user gave full access to the photos it returns an empty array.
Returns: Promise<GalleryPhotos>
Since: 4.1.0
getLimitedLibraryPhotos()
1getLimitedLibraryPhotos() => Promise<GalleryPhotos>
iOS 14+ Only: Return an array of photos selected from the limited photo library.
Returns: Promise<GalleryPhotos>
Since: 4.1.0
checkPermissions()
1checkPermissions() => Promise<PermissionStatus>
Check camera and photo album permissions
Returns: Promise<PermissionStatus>
Since: 1.0.0
requestPermissions(...)
1requestPermissions(permissions?: CameraPluginPermissions | undefined) => Promise<PermissionStatus>
Request camera and photo album permissions
| Param | Type |
|---|---|
permissions | CameraPluginPermissions |
Returns: Promise<PermissionStatus>
Since: 1.0.0
Interfaces
Photo
| Prop | Type | Description | Since |
|---|---|---|---|
base64String | string | The base64 encoded string representation of the image, if using CameraResultType.Base64. | 1.0.0 |
dataUrl | string | The url starting with 'data:image/jpeg;base64,' and the base64 encoded string representation of the image, if using CameraResultType.DataUrl. Note: On web, the file format could change depending on the browser. | 1.0.0 |
path | string | If using CameraResultType.Uri, the path will contain a full, platform-specific file URL that can be read later using the Filesystem API. | 1.0.0 |
webPath | string | webPath returns a path that can be used to set the src attribute of an image for efficient loading and rendering. | 1.0.0 |
exif | any | Exif data, if any, retrieved from the image | 1.0.0 |
format | string | The format of the image, ex: jpeg, png, gif. iOS and Android only support jpeg. Web supports jpeg, png and gif, but the exact availability may vary depending on the browser. gif is only supported if webUseInput is set to true or if source is set to Photos. | 1.0.0 |
saved | boolean | Whether if the image was saved to the gallery or not. On Android and iOS, saving to the gallery can fail if the user didn't grant the required permissions. On Web there is no gallery, so always returns false. | 1.1.0 |
ImageOptions
| Prop | Type | Description | Default | Since |
|---|---|---|---|---|
quality | number | The quality of image to return as JPEG, from 0-100 Note: This option is only supported on Android and iOS | 1.0.0 | |
allowEditing | boolean | Whether to allow the user to crop or make small edits (platform specific). On iOS 14+ it's only supported for CameraSource.Camera, but not for CameraSource.Photos. | 1.0.0 | |
resultType | CameraResultType | How the data should be returned. Currently, only 'Base64', 'DataUrl' or 'Uri' is supported | 1.0.0 | |
saveToGallery | boolean | Whether to save the photo to the gallery. If the photo was picked from the gallery, it will only be saved if edited. | : false | 1.0.0 |
width | number | The desired maximum width of the saved image. The aspect ratio is respected. | 1.0.0 | |
height | number | The desired maximum height of the saved image. The aspect ratio is respected. | 1.0.0 | |
correctOrientation | boolean | Whether to automatically rotate the image "up" to correct for orientation in portrait mode | : true | 1.0.0 |
source | CameraSource | The source to get the photo from. By default this prompts the user to select either the photo album or take a photo. | : CameraSource.Prompt | 1.0.0 |
direction | CameraDirection | iOS and Web only: The camera direction. | : CameraDirection.Rear | 1.0.0 |
presentationStyle | 'fullscreen' | 'popover' | iOS only: The presentation style of the Camera. | : 'fullscreen' | 1.0.0 |
webUseInput | boolean | Web only: Whether to use the PWA Element experience or file input. The default is to use PWA Elements if installed and fall back to file input. To always use file input, set this to true. Learn more about PWA Elements: https://capacitorjs.com/docs/web/pwa-elements | 1.0.0 | |
promptLabelHeader | string | Text value to use when displaying the prompt. | : 'Photo' | 1.0.0 |
promptLabelCancel | string | Text value to use when displaying the prompt. iOS only: The label of the 'cancel' button. | : 'Cancel' | 1.0.0 |
promptLabelPhoto | string | Text value to use when displaying the prompt. The label of the button to select a saved image. | : 'From Photos' | 1.0.0 |
promptLabelPicture | string | Text value to use when displaying the prompt. The label of the button to open the camera. | : 'Take Picture' | 1.0.0 |
GalleryPhotos
| Prop | Type | Description | Since |
|---|---|---|---|
photos | GalleryPhoto[] | Array of all the picked photos. | 1.2.0 |
GalleryPhoto
| Prop | Type | Description | Since |
|---|---|---|---|
path | string | Full, platform-specific file URL that can be read later using the Filesystem API. | 1.2.0 |
webPath | string | webPath returns a path that can be used to set the src attribute of an image for efficient loading and rendering. | 1.2.0 |
exif | any | Exif data, if any, retrieved from the image | 1.2.0 |
format | string | The format of the image, ex: jpeg, png, gif. iOS and Android only support jpeg. Web supports jpeg, png and gif. | 1.2.0 |
GalleryImageOptions
| Prop | Type | Description | Default | Since |
|---|---|---|---|---|
quality | number | The quality of image to return as JPEG, from 0-100 Note: This option is only supported on Android and iOS. | 1.2.0 | |
width | number | The desired maximum width of the saved image. The aspect ratio is respected. | 1.2.0 | |
height | number | The desired maximum height of the saved image. The aspect ratio is respected. | 1.2.0 | |
correctOrientation | boolean | Whether to automatically rotate the image "up" to correct for orientation in portrait mode | : true | 1.2.0 |
presentationStyle | 'fullscreen' | 'popover' | iOS only: The presentation style of the Camera. | : 'fullscreen' | 1.2.0 |
limit | number | Maximum number of pictures the user will be able to choose. Note: This option is only supported on Android 13+ and iOS. | 0 (unlimited) | 1.2.0 |
PermissionStatus
| Prop | Type |
|---|---|
camera | CameraPermissionState |
photos | CameraPermissionState |
CameraPluginPermissions
| Prop | Type |
|---|---|
permissions | CameraPermissionType[] |
Type Aliases
CameraPermissionState
PermissionState | 'limited'
PermissionState
'prompt' | 'prompt-with-rationale' | 'granted' | 'denied'
CameraPermissionType
'camera' | 'photos'
Enums
CameraResultType
| Members | Value |
|---|---|
Uri | 'uri' |
Base64 | 'base64' |
DataUrl | 'dataUrl' |
CameraSource
| Members | Value | Description |
|---|---|---|
Prompt | 'PROMPT' | Prompts the user to select either the photo album or take a photo. |
Camera | 'CAMERA' | Take a new photo using the camera. |
Photos | 'PHOTOS' | Pick an existing photo from the gallery or photo album. |
CameraDirection
| Members | Value |
|---|---|
Rear | 'REAR' |
Front | 'FRONT' |
No vulnerabilities found.
Reason
7 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
0 existing vulnerabilities detected
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/ionic-team/.github/SECURITY.md:1
- Info: Found linked content: github.com/ionic-team/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/ionic-team/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/ionic-team/.github/SECURITY.md:1
Reason
Found 22/30 approved changesets -- score normalized to 7
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-android.yml:46
- Warn: jobLevel 'packages' permission set to 'write': .github/workflows/publish-android.yml:47
- Warn: no topLevel permission defined: .github/workflows/bot.yml:1
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/dev-releases-for-pr.yml:10
- Warn: no topLevel permission defined: .github/workflows/needs-reply.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-android.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-ios.yml:1
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-latest.yml:6
- Warn: topLevel 'packages' permission set to 'write': .github/workflows/publish-latest.yml:8
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-npm-alpha.yml:6
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-npm-beta.yml:6
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-npm-dev.yml:6
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-npm-latest-from-pre.yml:13
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-npm-latest.yml:13
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-npm-nightly.yml:8
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-npm-rc.yml:6
Reason
binaries present in source code
Details
- Warn: binary detected: action-sheet/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: app-launcher/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: app/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: browser/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: camera/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: clipboard/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: device/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: dialog/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: filesystem/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: geolocation/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: haptics/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: keyboard/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: local-notifications/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: network/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: preferences/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: push-notifications/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: screen-orientation/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: screen-reader/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: share/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: splash-screen/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: status-bar/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: text-zoom/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: toast/android/gradle/wrapper/gradle-wrapper.jar:1
Reason
license file not detected
Details
- Warn: project does not have a license file
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bot.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/bot.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/bot.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/bot.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/dev-releases-for-pr.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/dev-releases-for-pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/needs-reply.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/needs-reply.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-android.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-android.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-android.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-android.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-ios.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-ios.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-alpha.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-alpha.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-alpha.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-alpha.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-beta.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-beta.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-beta.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-beta.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-dev.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-dev.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-dev.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-latest-from-pre.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-latest-from-pre.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-latest-from-pre.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-latest-from-pre.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-latest.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-latest.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-latest.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-latest.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-nightly.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-nightly.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-rc.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-rc.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-rc.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ionic-team/capacitor-plugins/publish-npm-rc.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:38
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:70
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:96
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:127
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:160
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:189
- Warn: npmCommand not pinned by hash: .github/workflows/dev-releases-for-pr.yml:81
- Warn: npmCommand not pinned by hash: .github/workflows/dev-releases-for-pr.yml:39
- Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-alpha.yml:25
- Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-beta.yml:25
- Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-dev.yml:25
- Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-latest-from-pre.yml:33
- Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-latest.yml:33
- Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-nightly.yml:28
- Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-rc.yml:25
- Info: 0 out of 44 GitHub-owned GitHubAction dependencies pinned
- Info: 2 out of 8 third-party GitHubAction dependencies pinned
- Info: 0 out of 15 npmCommand dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 25 are checked with a SAST tool
Score
4.9
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More