
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
ably-react-native
Advanced tools
React Native wrapper for the JavaScript realtime client library for Ably.io, the realtime messaging service
⚠️ Warning - This library is now deprecated in favour of the upstream ably-js repository. If you want to use Ably in a React Native project please use that library instead.
A React Native client library for Ably Realtime, a realtime data delivery platform.
This repo is a wrapper for the ably-js client library which introduces a dependency needed by React Native. See the ably-js README for usage details of the ably-js client library. The ably-js library currently targets the Ably 1.1 client library specification. You can jump to the 'Known Limitations' section to see the features this client library does not yet support or view our client library SDKs feature support matrix to see the list of all the available features.
For complete API documentation, see the Ably Realtime documentation.
The ably-js library currently does not support being the target of a push notification (i.e. web push)
npm install ably-react-native
For the Realtime library:
import * as Ably from 'ably'
const realtime = new Ably.Realtime(options: ClientOptions)
// Or if using a toolchain that doesn't support ES6 module syntax:
const Ably = require('ably');
const client = new Ably.Realtime(options: ClientOptions);
For the REST-only library:
import * as Ably from 'ably'
const realtime = new Ably.Rest(options: ClientOptions)
// Or if using a toolchain that doesn't support ES6 module syntax:
const Ably = require('ably');
const client = new Ably.Rest(options: ClientOptions);
For very old versions of React Native, which do not support the react-native automatic entrypoint, you may have to instead do
var Ably = require('ably/browser/static/ably-reactnative.js');
(and similarly for Rest)
See the ably-js repo.
Yes, this repo typically has very few recent commits because this React Native repo doesn't do very much: it's a very thin wrapper around the ably-js repo.
Yes, as far as we know. If you find any issues, please raise an issue (in this repo only for issues specific to react-native or this wrapper; all other issues should go in the main ably-js repo) or contact us
This library uses semantic versioning. For each release, the following needs to be done:
npm version <type> (see docs) and commit the change.git tag v1.0.0 && git push origin v1.0.0npm publish to publish the gem to npmCopyright (c) 2016 Ably Real-time Ltd, Licensed under the Apache License, Version 2.0. Refer to LICENSE for the license terms.
FAQs
React Native wrapper for the JavaScript realtime client library for Ably.io, the realtime messaging service
We found that ably-react-native demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.