npmpackage.info

Gathering detailed insights and metrics for @xhsfe/react-native-community-cli-plugin-metro

@xhsfe/react-native-community-cli-plugin-metro - 11.4.1-red.0 | npmpackage.info

@xhsfe/react-native-community-cli-plugin-metro

The React Native Community CLI - command line tools to help you build RN apps

11.4.1-red.0

2,667

MIT

TypeScript

64.95 kB

4.5

Installations

npm install @xhsfe/react-native-community-cli-plugin-metro

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

18.20.5

NPM Version

10.8.2 Score

50.3

Supply Chain

57.3

Quality

67.6

Maintenance

100

Vulnerability

97.1

License

Pull Requests

Open

17

Total

1,508

Closed

202

Merged

1,289

Issues

Open

34

Total

1,141

Closed

1,107

Releases

188

v19.0.0

Updated on May 14, 2025

v17.0.0

Updated on Mar 05, 2025

v16.0.2

Updated on Mar 05, 2025

v15.1.0

Updated on Mar 05, 2025

v15.0.1

Updated on Oct 31, 2024

v15.0.0

Updated on Oct 31, 2024

View All 188 releases

Languages

TypeScript

JavaScript

HTML

Java

Kotlin

Shell

Objective-C

Ruby

Batchfile

TypeScript (95.73%)

JavaScript (1.97%)

HTML (1.08%)

Java (0.57%)

Kotlin (0.42%)

Shell (0.09%)

Objective-C (0.08%)

Ruby (0.05%)

Batchfile (0.02%)

Developer

react-native-community

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

2,667 Stars

2,660 Commits

925 Forks

47 Watchers

53 Branches

551 Contributors

Updated on Jul 12, 2025

Maintainers

View All 551 Contributors

Package Meta Information

Latest Version

11.4.1-red.0

Package Id

@xhsfe/react-native-community-cli-plugin-metro@11.4.1-red.0

Unpacked Size

64.95 kB

Size

15.46 kB

File Count

NPM Version

10.8.2

Node Version

18.20.5

Published on

Jan 09, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@react-native-community/cli-server-api @react-native-community/cli-tools chalk execa metro metro-config metro-core metro-react-native-babel-transformer metro-resolver metro-runtime readline

Dev Dependencies

@react-native-community/cli-types

@react-native-community/cli-plugin-metro

This package is part of the React Native CLI. It contains commands for managing the Metro bundler.

Installation

1yarn add @react-native-community/cli-plugin-metro

Commands

`start`

Usage:

1react-native start [option]

Starts the server that communicates with connected devices

Options

`--port <number>`

Specify port to listen on

`--projectRoot <path>`

Path to a custom project root

`--watchFolders <list>`

Specify any additional folders to be added to the watch list

`--assetPlugins <list>`

Specify any additional asset plugins to be used by the packager by full filepath

`--sourceExts <list>`

Specify any additional source extensions to be used by the packager

`--max-workers <number>`

Specifies the maximum number of workers the worker-pool will spawn for transforming files. This defaults to the number of the cores available on your machine

`--transformer <string>`

Specify a custom transformer to be used

`--reset-cache, --resetCache`

Removes cached files

`--custom-log-reporter-path, --customLogReporterPath <string>`

Path to a JavaScript file that exports a log reporter as a replacement for TerminalReporter

`--https`

Enables https connections to the server

`--key <path>`

Path to custom SSL key

`--cert <path>`

Path to custom SSL cert

`--config <string>`

Path to the CLI configuration file

`--no-interactive`

Disables interactive mode

`bundle`

Usage:

1react-native bundle <flag>

Builds the JavaScript bundle for offline use.

`--entry-file <path>`

Path to the root JS file, either absolute or relative to JS root.

`--platform <string>`

default: ios

Either "ios" or "android".

`--transformer <string>`

Specify a custom transformer to be used.

`--dev [boolean]`

default: true

If false, warnings are disabled and the bundle is minified.

`--minify [boolean]`

Allows overriding whether bundle is minified. This defaults to false if dev is true, and true if dev is false. Disabling minification can be useful for speeding up production builds for testing purposes.

`--bundle-output <string>`

File name where to store the resulting bundle, ex. /tmp/groups.bundle.

If you are planning on building a debug APK, that will run without the packager, by invoking ./gradlew assembleDebug you can simply set bundleInDebug: true in your app/build.gradle file, inside the project.ext.react map.

Alternatively if you want to run react-native bundle manually and then create the APK with ./gradlew assembleDebug you have to make sure to put the bundle into the right directory and give it the right name, so that gradle can find it.

For react-native versions 0.57 and above the bundle output path should be: android/app/build/generated/assets/react/debug/index.android.js

To find out the correct path for previous react-native versions, take a look at the react.gradle file here: https://github.com/facebook/react-native/blob/0.57-stable/react.gradle or inside your node_modules/react-native directory.

The expected path for the js bundle can be found on the line that starts with jsBundleDir = .

`--bundle-encoding <string>`

default: utf8

Encoding the bundle should be written in (https://nodejs.org/api/buffer.html#buffer_buffer).

`--max-workers <number>`

Specifies the maximum number of workers the worker-pool will spawn for transforming files. This defaults to the number of the cores available on your machine.

`--sourcemap-output <string>`

File name where to store the sourcemap file for resulting bundle, ex. /tmp/groups.map.

`--sourcemap-sources-root <string>`

Path to make sourcemap sources entries relative to, ex. /root/dir.

`--sourcemap-use-absolute-path`

default: false

Report SourceMapURL using its full path.

`--assets-dest <string>`

Directory name where to store assets referenced in the bundle.

If you are planning on building a debug APK that will run without the packager, see (--bundle-output)

Alternatively if you want to run react-native bundle manually and then create the APK with ./gradlew assembleDebug you have to make sure to put the assets into the right directory, so that gradle can find them.

For react-native versions 0.57 and above the --assets-dest path should be: android/app/build/generated/res/react/debug

The expected path for the assets can be found in the react.gradle file on the line that starts with resourcesDir =

`--reset-cache`

default: false

Removes cached files.

`--read-global-cache`

default: false

Try to fetch transformed JS code from the global cache, if configured.

`--config <string>`

Path to the CLI configuration file.

`ram-bundle`

Usage:

1react-native ram-bundle [options]

Builds JavaScript as a "Random Access Module" bundle for offline use.

Options

Accepts all of bundle commands and following:

`--indexed-ram-bundle`

Force the "Indexed RAM" bundle file format, even when building for Android.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

7

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nigthly-release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/nigthly-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nigthly-release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/nigthly-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-drafter.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/release-drafter.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/stale.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/react-native-community/cli/test.yml/main?enable=pin
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

4.5

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More