Gathering detailed insights and metrics for launchdarkly-react-native-client-sdk
Gathering detailed insights and metrics for launchdarkly-react-native-client-sdk
Installations
npm install launchdarkly-react-native-client-sdkScore
56.4
Supply Chain
61
Quality
79.8
Maintenance
100
Vulnerability
95.6
License
Developer
launchdarkly
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
16.20.2
NPM Version
8.19.4
Statistics
47 Stars
513 Commits
32 Forks
40 Watching
9 Branches
184 Contributors
Updated on 29 Oct 2024
Languages
Java (33.47%)
JavaScript (23.22%)
Swift (19.5%)
TypeScript (10.5%)
Objective-C (4.95%)
Shell (3.64%)
Ruby (2.33%)
Kotlin (1.82%)
Objective-C++ (0.57%)
Total Downloads
Cumulative downloads
Total Downloads
5,558,445
Last day
-42.6%
3,154
Compared to previous day
Last week
-8%
27,142
Compared to previous week
Last month
-0.7%
120,470
Compared to previous month
Last year
6.4%
2,128,071
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
LaunchDarkly Client-Side SDK for React Native
[!IMPORTANT] As mentioned in the repository changelog, the
launchdarkly-react-native-client-sdkproject has been renamed to@launchdarkly/react-native-client-sdk. All future releases will be made from the new repository. Please consider upgrading and filing potential requests in that repository's issue tracker.
v9.x readme
LaunchDarkly overview
LaunchDarkly is a feature management platform that serves trillions of feature flags daily to help teams build better software, faster. Get started using LaunchDarkly today!
Supported versions
React Native SDK version 10 is now released.
The LaunchDarkly React Native SDK version 10 is written in pure JavaScript and is compatible with Expo. It supports hot reloading. For customers using React Native 0.72.x - 0.73.x, use the latest 10.x release. If you cannot upgrade to the 10.x yet, use RN 8.0.x and 9.0.x respectively.
For React Native 0.71.x, use the latest 8.0.x release.
For React Native 0.69.x - 0.70.x support, use the latest 7.1.x release.
Getting started
Refer to the SDK documentation for instructions on getting started with using the SDK.
Learn more
Read our documentation for in-depth instructions on configuring and using LaunchDarkly. You can also head straight to the complete reference guide for this SDK.
Testing
We run integration tests for all our SDKs using a centralized test harness. This approach gives us the ability to test for consistency across SDKs, as well as test networking behavior in a long-running application. These tests cover each method in the SDK, and verify that event sending, flag evaluation, stream reconnection, and other aspects of the SDK all behave correctly.
Contributing
We encourage pull requests and other contributions from the community. Check out our contributing guidelines for instructions on how to contribute to this SDK.
About LaunchDarkly
- LaunchDarkly is a continuous delivery platform that provides feature flags as a service and allows developers to iterate quickly and safely. We allow you to easily flag your features and manage them from the LaunchDarkly dashboard. With LaunchDarkly, you can:
- Roll out a new feature to a subset of your users (like a group of users who opt-in to a beta tester group), gathering feedback and bug reports from real-world use cases.
- Gradually roll out a feature to an increasing percentage of users, and track the effect that the feature has on key metrics (for instance, how likely is a user to complete a purchase if they have feature A versus feature B?).
- Turn off a feature that you realize is causing performance problems in production, without needing to re-deploy, or even restart the application with a changed configuration file.
- Grant access to certain features based on user attributes, like payment plan (eg: users on the ‘gold’ plan get access to more features than users in the ‘silver’ plan). Disable parts of your application to facilitate maintenance, without taking everything offline.
- LaunchDarkly provides feature flag SDKs for a wide variety of languages and technologies. Read our documentation for a complete list.
- Explore LaunchDarkly
- launchdarkly.com for more information
- docs.launchdarkly.com for our documentation and SDK reference guides
- apidocs.launchdarkly.com for our API documentation
- blog.launchdarkly.com for the latest product updates
Developing this SDK
- Run
yarn doctorin both the root and ManualTestApp directories and make sure everything is green- If watchman fails, you can try installing it manually
brew reinstall watchman
- If watchman fails, you can try installing it manually
- Make sure you have modd installed so native code changes are hot reloaded
- For ios run
yarn dev-ios - For android run
yarn dev-android
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy
- Info: Found text in security policy: SECURITY.md:1
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
binaries present in source code
Details
- Warn: binary detected: ManualTestApp/android/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: android/gradle/wrapper/gradle-wrapper.jar:1
Reason
Found 14/29 approved changesets -- score normalized to 4
Reason
8 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Reason
project is archived
Details
- Warn: Repository is archived.
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Warn: no topLevel permission defined: .github/workflows/stale.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/launchdarkly/react-native-client-sdk/main.yml/main?enable=pin
- Info: 0 out of 10 GitHub-owned GitHubAction dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact 9.4.2 not signed: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/182044303
- Warn: release artifact 8.3.0 not signed: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/174798268
- Warn: release artifact 9.3.0 not signed: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/159955783
- Warn: release artifact 9.2.0 not signed: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/147598501
- Warn: release artifact 8.2.0 not signed: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/147131469
- Warn: release artifact 9.4.2 does not have provenance: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/182044303
- Warn: release artifact 8.3.0 does not have provenance: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/174798268
- Warn: release artifact 9.3.0 does not have provenance: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/159955783
- Warn: release artifact 9.2.0 does not have provenance: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/147598501
- Warn: release artifact 8.2.0 does not have provenance: https://api.github.com/repos/launchdarkly/react-native-client-sdk/releases/147131469
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 15 are checked with a SAST tool
Score
3.4
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More