npmpackage.info

Gathering detailed insights and metrics for realm

Other packages similar to realm

is-regex

1.2.1

Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag

is-date-object

1.1.0

Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.

is-boolean-object

1.2.2

Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.

is-weakref

1.1.1

Is this value a JS WeakRef? This module works cross-realm/iframe, and despite ES6 @@toStringTag.

Gathering detailed insights and metrics for realm

realm - 12.14.2 | npmpackage.info

realm

Realm is a mobile database: an alternative to SQLite & key-value stores

12.14.2

5,925

Apache-2.0

TypeScript

845.60 MB

3.2

Installations

npm install realm

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, ESM

Min. Node Version

>=18

Node Version

20.19.0

NPM Version

10.8.2 Pull Requests

Open

35

Total

3,256

Closed

651

Merged

2,570

Issues

Open

586

Total

3,651

Closed

3,065

Releases

272

Realm JavaScript v12.14.2

v12.14.2

Updated on Apr 10, 2025

Realm JavaScript v12.14.1

v12.14.1

Updated on Jan 29, 2025

Realm JavaScript v20.1.0

v20.1.0

Updated on Dec 02, 2024

Realm JavaScript v12.14.0

v12.14.0

Updated on Nov 12, 2024

Realm JavaScript v12.13.2

v12.13.2

Updated on Oct 30, 2024

Realm React v0.11.0

realm-react-v0.11.0

Updated on Oct 04, 2024

View All 272 releases

Languages

TypeScript

JavaScript

C++

CSS

Java

Objective-C++

CMake

Ruby

Shell

Objective-C

Dockerfile

Kotlin

Python

HTML

TypeScript (94.68%)

JavaScript (1.59%)

C++ (1.37%)

CSS (0.45%)

Java (0.41%)

Objective-C++ (0.38%)

CMake (0.34%)

Ruby (0.23%)

Shell (0.2%)

Objective-C (0.15%)

Dockerfile (0.11%)

Kotlin (0.09%)

Python (0.01%)

Developer

realm

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

Apache-2.0 License

5,925 Stars

6,775 Commits

599 Forks

104 Watchers

312 Branches

156 Contributors

Updated on Jul 11, 2025

Maintainers

View All 156 Contributors

Package Meta Information

Latest Version

12.14.2

Package Id

realm@12.14.2

Unpacked Size

845.60 MB

Size

175.13 MB

File Count

3,086

NPM Version

10.8.2

Node Version

20.19.0

Published on

Apr 10, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

[!WARNING] We announced the deprecation of Atlas Device Sync + Realm SDKs in September 2024. For more information please see:

SDK Deprecation

Device Sync Deprecation

For a version of RealmJS without sync features, install from community on npm or see the community git branch.

The Realm Database

Realm is a mobile database that runs directly inside phones, tablets or wearables. This project hosts the JavaScript & TypeScript implementation of Realm. Currently, we support React Native (JSC & Hermes on iOS & Android), Node.js and Electron (on Windows, MacOS and Linux).

What are the Atlas Device SDKs?

The Atlas Device SDKs are a collection of language and platform specific SDKs, each with a suite of app development tools optimized for data access and persistence on mobile and edge devices. Use the SDKs to build data-driven mobile, edge, web, desktop, and IoT apps.

It might help to think of the Realm database as the persistance layer of the Atlas Device SDKs.

Features

Mobile-first: Realm is the first database built from the ground up to run directly inside phones, tablets and wearables.
Simple: Data is directly exposed as objects and queryable by code, removing the need for ORM's riddled with performance & maintenance issues.
Modern: The database supports relationships, generics, and vectorization.
Fast: It is faster than even raw SQLite on common operations, while maintaining an extremely rich feature set.
MongoDB Atlas Device Sync: Makes it simple to keep data in sync across users, devices, and your backend in real time. Get started for free with a template application and create the cloud backend.

Getting Started

Please see the detailed instructions in our docs to use Atlas Device SDK for Node.js and Atlas Device SDK for React Native. Please notice that currently only Node.js version 18 or later is supported. For React Native users, we have a compatibility matrix showing which versions are supported.

Documentation

Atlas Device SDKs for React Native and Node.js

The documentation for the Atlas Device SDK for React Native can be found at mongodb.com/docs/atlas/device-sdks/sdk/react-native/. The documentation for the Atlas Device SDK for Node.js can be found at mongodb.com/docs/atlas/device-sdks/sdk/node/.

The API reference is located at docs.mongodb.com/realm-sdks/js/latest/.

If you are using React Native, please also take a look the README for @realm/react, which provides React hooks to make working with Realm easier.

TypeScript models

TypeScript is a popular alternative to pure JavaScript as it provide static typing. Our TypeScript support consists of two parts

Accurate TypeScript definitions @realm/babel-plugin to transform TypeScript classes to Realm schemas. An example of a model class is:

1class Task extends Realm.Object<Task, "description"> {
2  _id = new Realm.BSON.ObjectId();
3  description!: string;
4  @index
5  isComplete = false;
6
7  static primaryKey = "_id";
8
9  constructor(realm, description: string) {
10    super(realm, { description });
11  }
12}

Integration with React Native

The Atlas Device SDK for React Native provides persistence of objects and advanced queries for persisted objects. You can have easier integration with React Native by using @realm/react.

Template apps

We have TypeScript templates to help you get started using Realm. Follow the links to your desired template and follow the instructions there to get up and running fast.

Getting Help

Need help with your code?: Look for previous questions on the #realm tag — or ask a new question. You can also check out our Community Forum where general questions about how to do something can be discussed.
Have a bug to report? Open an issue. If possible, include the version of Realm, a full log, the Realm file, and a project that shows the issue.
Have a feature request? Open an issue. Tell us what the feature should do, and why you want the feature.

Contributing

See CONTRIBUTING.md for more details!

Known issues

Realm is not compatible with the legacy Chrome Debugger. The following debugging methods are supported:
- Hermes Debugger is the recommended way for debugging modern React Native apps.
- Safari also has a similar feature set, but requires some setup and only supports debugging in iOS.
- NOTE: For the above methods, it is not necessary to enable Debug with Chrome in the Debug Menu.

Building the SDK

For instructions on building the SDK from the source, see the building.md file.

Troubleshooting missing binary

It's possible after installing and running Realm that one encounters the error Could not find the Realm binary. Here are are some tips to help with this.

Compatibility

Consult our COMPATIBILITY.md to ensure you are running compatible version of realm with the supported versions of node, react-native or expo.

React Native

iOS

Typically this error occurs when the pod dependencies haven't been updating. Try running the following command:

npx pod-install

If that still doesn't help it's possible there are some caching errors with your build or your pod dependencies. The following commands can be used to safely clear these caches:

rm -rf ios/Pods
rm ios/Podfile.lock
rm -rf ~/Library/Developer/Xcode/DerivedData

Afterwards, reinstall pods and try again. If this still doesn't work, ensure that prebuilds/apple/realm-core.xcframework directory exists and contains a binary for your platform and architecture. If this is missing, try reinstalling the realm npm package and as well as CocoaPods.

Android

This can occur when installing realm and not performing a clean build. The following commands can be used to clear your cache:

cd android
./gradlew clean

Afterwards, try and rebuild for Android. If you are still encountering problems, ensure that node_moduels/realm/react-native/android/src/main/jniLibs contains a realm binary for your architecture. If this is missing, try reinstalling the realm npm package.

Expo

If you are using Expo, a common pitfall is not installing the expo-dev-client and using the Development Client specific scripts to build and run your React Native project in Expo. The Development Client allows you to create a local version of Expo Go which includes 3rd party libraries such as Realm. If you would like to use realm in an Expo project, the following steps can help.

install the expo-dev-client:
```
npx expo install expo-dev-client
```
build the dev client for iOS
```
npx expo run:ios
```
build the dev client for Android
```
npx expo run:android
```
start the bundler without building
```
npx expo start --dev-client
```

Node/Electron

When running npm install realm the realm binaries for the detected architecture are downloaded into node_modules/realm/prebuilds. If this directory is missing or empty, ensure that there weren't any network issues reported on installation.

Analytics

Asynchronously submits install information to Realm.

Why are we doing this? In short, because it helps us build a better product for you. None of the data personally identifies you, your employer or your app, but it will help us understand what language you use, what Node.js versions you target, etc. Having this info will help prioritizing our time, adding new features and deprecating old features. Collecting an anonymized application path & anonymized machine identifier is the only way for us to count actual usage of the other metrics accurately. If we don’t have a way to deduplicate the info reported, it will be useless, as a single developer npm install-ing the same app 10 times would report 10 times more than another developer that only installs once, making the data all but useless. No one likes sharing data unless it’s necessary, we get it, and we’ve debated adding this for a long long time. If you truly, absolutely feel compelled to not send this data back to Realm, then you can set an env variable named REALM_DISABLE_ANALYTICS.

Currently the following information is reported:

What version of Realm is being installed.
The OS platform and version which is being used.
If a JavaScript framework (currently React Native and Electron) is used and its version.
Which JavaScript engine is being used.
Node.js version number.
TypeScript version if used.
An anonymous machine identifier and hashed application name to aggregate the other information on.

Moreover, we unconditionally write various constants to a file which we might use at runtime.

Code of Conduct

This project adheres to the MongoDB Code of Conduct. By participating, you are expected to uphold this code. Please report unacceptable behavior to community-conduct@mongodb.com.

License

Realm JS and Realm Core are published under the Apache License 2.0.

Feedback

If you use Realm and are happy with it, all we ask is that you please consider sending out a tweet mentioning @realm to share your thoughts

And if you don't like it, please let us know what you would like improved, so we can fix it!

Contributors

Made with contrib.rocks.

No vulnerabilities found.

10

License

Determines if the project has defined a license.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Packaging

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

4

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

3

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/Issue-Needs-Attention.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/Issue-Needs-Attention.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/install-test-react-native.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/install-test-react-native.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/install-test-react-native.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/install-test-react-native.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/install-test-react-native.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/install-test-react-native.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/install-test-react-native.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/install-test-react-native.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/install-test-react-native.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/install-test-react-native.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/install-test-react-native.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/install-test-react-native.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/install-test-react-native.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/install-test-react-native.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-labeler.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/issue-labeler.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock-threads.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/lock-threads.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/no-response.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/no-response.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package-unit-tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/package-unit-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package-unit-tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/package-unit-tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/package-unit-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/package-unit-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-coverage.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-coverage.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-coverage.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-coverage.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-coverage.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-coverage.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-coverage.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-coverage.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-coverage.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-coverage.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-linting.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-linting.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-linting.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-linting.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:317: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:321: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:335: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:342: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:348: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:361: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:378: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:643: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:648: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:654: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:660: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:666: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:673: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:678: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:683: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:706: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:716: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:751: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:289: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:432: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:439: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:442: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:458: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:503: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:508: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:514: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:520: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:527: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:531: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:536: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:547: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:552: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-js.yml:557: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-web.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-web.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-realm-web.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/pr-realm-web.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prepare-package-release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-package-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare-package-release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-package-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prepare-package-release.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-package-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prepare-package-release.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-package-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare-release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prepare-release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prepare-release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare-templates-release.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-templates-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare-templates-release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/prepare-templates-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-containers.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-containers.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-containers.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-containers.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-containers.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-containers.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-containers.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-containers.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-package-release.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-package-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-release.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-templates.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-templates.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-templates.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/publish-templates.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-server.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/test-server.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-server.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/realm/realm-js/test-server.yml/main?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
Warn: containerImage not pinned by hash: Dockerfile.android:2: pin your Docker image by updating debian:stretch-20210927-slim to debian:stretch-20210927-slim@sha256:3bfa98815a23acc19b2fcc18cfae398985b3464ebb9a7a813e7e508fce50b718
Warn: containerImage not pinned by hash: debian-multiarch-arm.Dockerfile:1: pin your Docker image by updating debian:11 to debian:11@sha256:6d4f6b40afca63b59a44ffcedbb2e457e83b645710916d7f094b79c6c591ac28
Warn: containerImage not pinned by hash: integration-tests/environments/electron/Dockerfile:1: pin your Docker image by updating node:10 to node:10@sha256:59531d2835edd5161c8f9512f9e095b1836f7a1fcb0ab73e005ec46047384911
Warn: downloadThenRun not pinned by hash: Dockerfile:23-27
Warn: downloadThenRun not pinned by hash: Dockerfile.android:19-39
Warn: downloadThenRun not pinned by hash: Dockerfile.android:71-75
Warn: downloadThenRun not pinned by hash: debian-multiarch-arm.Dockerfile:27-31
Warn: npmCommand not pinned by hash: .github/workflows/pr-realm-js.yml:544
Info: 0 out of 70 GitHub-owned GitHubAction dependencies pinned
Info: 15 out of 62 third-party GitHubAction dependencies pinned
Info: 0 out of 4 downloadThenRun dependencies pinned
Info: 20 out of 21 npmCommand dependencies pinned
Info: 0 out of 4 containerImage dependencies pinned

1

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

Reason

detected GitHub workflow tokens with excessive permissions

Details

Info: jobLevel 'actions' permission set to 'read': .github/workflows/install-test-react-native.yml:106
Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-containers.yml:20
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish-package-release.yml:33
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish-release.yml:21
Warn: no topLevel permission defined: .github/workflows/Issue-Needs-Attention.yml:1
Warn: no topLevel permission defined: .github/workflows/auto-assign.yml:1
Warn: no topLevel permission defined: .github/workflows/cleanup-clusters.yml:1
Warn: no topLevel permission defined: .github/workflows/install-test-react-native.yml:1
Warn: no topLevel permission defined: .github/workflows/issue-labeler.yml:1
Warn: no topLevel permission defined: .github/workflows/no-response.yml:1
Warn: no topLevel permission defined: .github/workflows/package-unit-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/pr-coverage.yml:1
Warn: no topLevel permission defined: .github/workflows/pr-linting.yml:1
Warn: no topLevel permission defined: .github/workflows/pr-realm-js.yml:1
Warn: no topLevel permission defined: .github/workflows/pr-realm-web.yml:1
Warn: no topLevel permission defined: .github/workflows/prepare-package-release.yml:1
Warn: no topLevel permission defined: .github/workflows/prepare-release.yml:1
Warn: no topLevel permission defined: .github/workflows/prepare-templates-release.yml:1
Warn: no topLevel permission defined: .github/workflows/publish-containers.yml:1
Warn: no topLevel permission defined: .github/workflows/publish-docs.yml:1
Warn: no topLevel permission defined: .github/workflows/publish-package-release.yml:1
Warn: no topLevel permission defined: .github/workflows/publish-release.yml:1
Warn: no topLevel permission defined: .github/workflows/publish-templates.yml:1
Warn: no topLevel permission defined: .github/workflows/test-server.yml:1

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

130 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2
Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
Warn: Project is vulnerable to: GHSA-7m48-wc93-9g85
Warn: Project is vulnerable to: GHSA-j7hp-h8jx-5ppr
Warn: Project is vulnerable to: GHSA-qqvq-6xgj-jw8g
Warn: Project is vulnerable to: GHSA-6r2x-8pq8-9489
Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh
Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-rxrc-rgv4-jpvx
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-2rxp-v6pw-ch6m
Warn: Project is vulnerable to: GHSA-4xqq-m2hx-25v8
Warn: Project is vulnerable to: GHSA-5866-49gr-22v4
Warn: Project is vulnerable to: GHSA-r55c-59qm-vjw6
Warn: Project is vulnerable to: GHSA-vg3r-rm7w-2xgh
Warn: Project is vulnerable to: GHSA-vmwr-mc7x-5vc3
Warn: Project is vulnerable to: GHSA-m5qc-5hw7-8vg7
Warn: Project is vulnerable to: GHSA-mpg4-rc92-vx8v
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-c2jc-4fpr-4vhg
Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
Warn: Project is vulnerable to: GHSA-ff7x-qrg7-qggm
Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6
Warn: Project is vulnerable to: GHSA-765h-qjxv-5f44
Warn: Project is vulnerable to: GHSA-f2jv-r9rf-7988
Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
Warn: Project is vulnerable to: GHSA-qqgx-2p2h-9c37
Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m
Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
Warn: Project is vulnerable to: GHSA-gmwp-3pwc-3j3g
Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
Warn: Project is vulnerable to: GHSA-w7rc-rwvf-8q5r
Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
Warn: Project is vulnerable to: GHSA-4p35-cfcx-8653
Warn: Project is vulnerable to: GHSA-7f3x-x4pr-wqhj
Warn: Project is vulnerable to: GHSA-jpp7-7chh-cf67
Warn: Project is vulnerable to: GHSA-q6wq-5p59-983w
Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq
Warn: Project is vulnerable to: GHSA-mxhp-79qh-mcx6
Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
Warn: Project is vulnerable to: GHSA-29xr-v42j-r956
Warn: Project is vulnerable to: GHSA-jgrx-mgxx-jf9v
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
Warn: Project is vulnerable to: GHSA-38fc-wpqx-33j7
Warn: Project is vulnerable to: GHSA-cf4h-3jhx-xvhq
Warn: Project is vulnerable to: GHSA-46c4-8wrp-j99v
Warn: Project is vulnerable to: GHSA-9m6j-fcg5-2442
Warn: Project is vulnerable to: GHSA-hh27-ffr2-f2jc
Warn: Project is vulnerable to: GHSA-rqff-837h-mm52
Warn: Project is vulnerable to: GHSA-8v38-pw62-9cw2
Warn: Project is vulnerable to: GHSA-hgjh-723h-mx2j
Warn: Project is vulnerable to: GHSA-jf5r-8hm2-f872
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-h6q6-9hqw-rwfv
Warn: Project is vulnerable to: GHSA-5fg8-2547-mr8q
Warn: Project is vulnerable to: GHSA-crh6-fp67-6883
Warn: Project is vulnerable to: GHSA-c4w7-xm78-47vh
Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
Warn: Project is vulnerable to: GHSA-wrw9-m778-g6mc
Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh
Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2
Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
Warn: Project is vulnerable to: GHSA-x6fg-f45m-jf5q
Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975
Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3

Score

3.2

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to realm

Other packages similar to realm

realm

Installations

Developer Guide

Yes

CommonJS, ESM

>=18

20.19.0

10.8.2

Pull Requests

35

3,256

651

2,570

Issues

586

3,651

3,065

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Dev Dependencies

The Realm Database

What are the Atlas Device SDKs?

Features

Getting Started

Documentation

Atlas Device SDKs for React Native and Node.js

TypeScript models

Integration with React Native

Template apps

Getting Help

Contributing

Known issues

Building the SDK

Troubleshooting missing binary

Compatibility

React Native

iOS

Android

Expo

Node/Electron

Analytics

Code of Conduct

License

Feedback

Contributors

10

10

10

4

3

3

1

0

0

0

0

0

0

3.2

/10