Gathering detailed insights and metrics for @react-native-community/cli-doctor
Gathering detailed insights and metrics for @react-native-community/cli-doctor
The React Native Community CLI - command line tools to help you build RN apps
Installations
npm install @react-native-community/cli-doctorScore
58.8
Supply Chain
60.9
Quality
96.7
Maintenance
100
Vulnerability
99.6
License
Developer
react-native-community
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
22.10.0
NPM Version
lerna/7.1.5/node@v22.10.0+arm64 (darwin)
Statistics
2,414 Stars
2,605 Commits
905 Forks
46 Watching
45 Branches
541 Contributors
Updated on 28 Nov 2024
Bundle Size
1.01 MB
Minified
308.33 kB
Minified + Gzipped
Languages
TypeScript (95.12%)
JavaScript (3.08%)
Java (0.56%)
HTML (0.44%)
Kotlin (0.41%)
CSS (0.16%)
Shell (0.09%)
Objective-C (0.08%)
Ruby (0.04%)
Batchfile (0.02%)
Total Downloads
Cumulative downloads
Total Downloads
145,886,849
Last day
-8.5%
331,233
Compared to previous day
Last week
-2.3%
1,836,865
Compared to previous week
Last month
-8.3%
8,249,170
Compared to previous month
Last year
80.3%
89,190,597
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
16
Versions
React Native Community CLI
Command line tools that help you build apps with react-native, shipped as the @react-native-community/cli NPM package.
Note: CLI has been extracted from core react-native as a part of "Lean Core" effort. Please read this blog post for more details.
Contents
- Compatibility
- Documentation
- About
- Creating a new React Native project
- Usage in an existing React Native project
- Updating the CLI
- Maintainers
- License
Compatibility
Our release cycle is independent of react-native. We follow semver and here is the compatibility table:
@react-native-community/cli | react-native |
|---|---|
| ^15.0.0 | ^0.76.0 |
| ^14.0.0 | ^0.75.0 |
| ^13.0.0 | ^0.74.0 |
| ^12.0.0 | ^0.73.0 |
| ^11.0.0 | ^0.72.0 |
| ^10.0.0 | ^0.71.0 |
| ^9.0.0 | ^0.70.0 |
| ^8.0.0 | ^0.69.0 |
| ^7.0.0 | ^0.68.0 |
| ^6.0.0 | ^0.65.0,^0.66.0,^0.67.0 |
| ^5.0.0 | ^0.64.0 |
| ^4.0.0 | ^0.62.0,^0.63.0 |
| ^3.0.0 | ^0.61.0 |
| ^2.0.0 | ^0.60.0 |
| ^1.0.0 | ^0.59.0 |
Documentation
About
This monorepository contains tools and helpers for React Native projects in form of a Command Line Tool (or CLI). This CLI is used directly by the react-native package and is not intended for use directly. We update it independently of React Native itself.
Creating a new React Native project
Run the following command in your terminal prompt:
1npx @react-native-community/cli@latest init MyApp
Usage in an existing React Native project
Once you're inside an existing project, you can run a series of commands to interact with your projects by using the rnc-cli binary.
Example running start command in terminal:
1yarn rnc-cli start
You can also add npm scripts to call it with whichever package manager you use:
1{ 2 "scripts": { 3 "start": "rnc-cli start" 4 } 5}
to call it as
1yarn start
Updating the CLI
[!WARNING] Please do it only if you need to. We don't recommend updating CLI independently of
react-nativeas it may cause unexpected issues.
React Native CLI is a dependency of react-native, which makes it a transitive dependency of your project. You can overwrite the version independently of react-native by using resolutions field in your package.json:
1{ 2 "resolutions": { 3 "@react-native-community/cli": "VERSION", 4 "@react-native-community/cli-clean": "VERSION", 5 "@react-native-community/cli-config": "VERSION", 6 "@react-native-community/cli-debugger-ui": "VERSION", 7 "@react-native-community/cli-doctor": "VERSION", 8 "@react-native-community/cli-link-assets": "VERSION", 9 "@react-native-community/cli-platform-android": "VERSION", 10 "@react-native-community/cli-platform-ios": "VERSION", 11 "@react-native-community/cli-server-api": "VERSION", 12 "@react-native-community/cli-tools": "VERSION", 13 "@react-native-community/cli-types": "VERSION" 14 } 15}
Maintainers
Previously:
License
Everything inside this repository is MIT licensed.
No vulnerabilities found.
Reason
30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
Found 19/29 approved changesets -- score normalized to 6
Reason
9 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-drafter.yml:16
- Warn: no topLevel permission defined: .github/workflows/nigthly-release.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/release-drafter.yml:10
- Warn: no topLevel permission defined: .github/workflows/stale.yml:1
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nigthly-release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/nigthly-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nigthly-release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/nigthly-release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-drafter.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/release-drafter.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/stale.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
- Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 4 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 21 are checked with a SAST tool
Score
4.5
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More