package.json

{
  "name": "@react-native-macos/monorepo",
  "private": true,
  "version": "1000.0.0",
  "license": "MIT",
  "packageManager": "yarn@4.12.0",
  "scripts": {
    "android": "yarn --cwd packages/rn-tester android",
    "build-android": "./gradlew :packages:react-native:ReactAndroid:build",
    "build": "node ./scripts/build/build.js",
    "build-types": "node ./scripts/build-types",
    "clang-format": "clang-format -i --glob=*/**/*.{h,cpp,m,mm}",
    "clean": "node ./scripts/build/clean.js",
    "flow-check": "flow check",
    "flow": "flow",
    "format-check": "prettier --list-different \"./**/*.{js,md,yml,ts,tsx}\"",
    "format": "npm run prettier && npm run clang-format",
    "featureflags": "yarn --cwd packages/react-native featureflags",
    "lint-ci": "./.github/workflow-scripts/analyze_code.sh && yarn shellcheck",
    "lint-markdown": "markdownlint-cli2 2>&1",
    "lint": "eslint --max-warnings 0 .",
    "prettier": "prettier --write \"./**/*.{js,md,yml,ts,tsx}\"",
    "print-packages": "node ./scripts/monorepo/print",
    "shellcheck": "./.github/workflow-scripts/analyze_scripts.sh",
    "start": "yarn --cwd packages/rn-tester start",
    "set-version": "node ./scripts/releases/set-version.js",
    "test-android": "./gradlew :packages:react-native:ReactAndroid:test",
    "test-ci": "jest --maxWorkers=2 --ci --reporters=\"default\" --reporters=\"jest-junit\"",
    "test-e2e-local-clean": "node ./scripts/release-testing/test-e2e-local-clean.js",
    "test-e2e-local": "node ./scripts/release-testing/test-e2e-local.js",
    "test-ios": "./scripts/objc-test.sh test",
    "test-typescript": "tsc -p packages/react-native/types/tsconfig.json",
    "test-generated-typescript": "tsc -p packages/react-native/types_generated/tsconfig.test.json",
    "test": "jest",
    "fantom": "./scripts/fantom.sh",
    "trigger-react-native-release": "node ./scripts/releases-local/trigger-react-native-release.js",
    "update-lock": "npx yarn-deduplicate"
  },
  "workspaces": [
    "packages/*",
    "tools/*",
    "private/*",
    "!packages/helloworld",
    "!packages/hermes-inspector-msggen",
    "!packages/react-native-bots",
    "!private/helloworld"
  ],
  "devDependencies": {
    "@babel/core": "^7.25.2",
    "@babel/eslint-parser": "^7.25.1",
    "@babel/generator": "^7.25.0",
    "@babel/plugin-syntax-typescript": "^7.25.4",
    "@babel/plugin-transform-regenerator": "^7.24.7",
    "@babel/preset-env": "^7.25.3",
    "@babel/preset-flow": "^7.24.7",
    "@electron/packager": "^18.3.6",
    "@jest/create-cache-key-function": "^29.7.0",
    "@microsoft/api-extractor": "^7.52.2",
    "@nx/js": "^21.4.1",
    "@react-native/metro-babel-transformer": "workspace:*",
    "@react-native/metro-config": "workspace:*",
    "@tsconfig/node22": "22.0.2",
    "@types/react": "^19.1.0",
    "@typescript-eslint/parser": "^7.1.1",
    "@yarnpkg/types": "^4.0.1",
    "ansi-styles": "^4.2.1",
    "babel-plugin-minify-dead-code-elimination": "^0.5.2",
    "babel-plugin-syntax-hermes-parser": "0.29.1",
    "babel-plugin-transform-define": "^2.1.4",
    "babel-plugin-transform-flow-enums": "^0.0.2",
    "clang-format": "^1.8.0",
    "connect": "^3.6.5",
    "debug": "^4.4.0",
    "deep-equal": "1.1.1",
    "eslint": "^8.57.0",
    "eslint-config-prettier": "^8.5.0",
    "eslint-plugin-babel": "^5.3.1",
    "eslint-plugin-eslint-comments": "^3.2.0",
    "eslint-plugin-ft-flow": "^2.0.1",
    "eslint-plugin-jest": "^27.9.0",
    "eslint-plugin-jsx-a11y": "^6.6.0",
    "eslint-plugin-react": "^7.30.1",
    "eslint-plugin-react-native": "^4.0.0",
    "eslint-plugin-redundant-undefined": "^0.4.0",
    "eslint-plugin-relay": "^1.8.3",
    "flow-api-translator": "0.29.1",
    "flow-bin": "^0.275.0",
    "glob": "^7.1.1",
    "hermes-eslint": "0.29.1",
    "hermes-transform": "0.29.1",
    "inquirer": "^7.1.0",
    "jest": "^29.7.0",
    "jest-config": "^29.7.0",
    "jest-diff": "^29.7.0",
    "jest-junit": "^10.0.0",
    "jest-snapshot": "^29.7.0",
    "markdownlint-cli2": "^0.17.2",
    "markdownlint-rule-relative-links": "^3.0.0",
    "metro-babel-register": "^0.82.5",
    "metro-memory-fs": "^0.82.5",
    "metro-transform-plugins": "^0.82.5",
    "micromatch": "^4.0.4",
    "node-fetch": "^2.2.0",
    "nullthrows": "^1.1.1",
    "nx": "21.4.1",
    "prettier": "2.8.8",
    "prettier-plugin-hermes-parser": "0.29.1",
    "react": "19.1.0",
    "react-test-renderer": "19.1.0",
    "rimraf": "^3.0.2",
    "shelljs": "^0.8.5",
    "signedsource": "^1.0.0",
    "supports-color": "^7.1.0",
    "temp-dir": "^2.0.0",
    "tinybench": "^3.1.0",
    "typescript": "5.8.3",
    "ws": "^6.2.3"
  },
  "resolutions": {
    "@grpc/proto-loader": "^0.7.8",
    "async": "^3.2.2",
    "debug": ">=3.1.0",
    "es5-ext": "0.10.53",
    "eslint-plugin-react-hooks": "6.1.0-canary-12bc60f5-20250613",
    "micromatch": "^4.0.0",
    "react-is": "19.1.0",
    "readable-stream": "^4.0.0 <4.4.2",
    "shell-quote": "^1.7.3",
    "tough-cookie": "^4.1.3"
  },
  "_justification": {
    "@grpc/proto-loader": "Resolves a security issue with protobufjs, one of its dependencies",
    "async": "Versions of async prior to 3.2.2 are vulnerable to prototype pollution",
    "debug": "ReDoS vulnerability in older versions, plus the dependents that pull in debug@<1.0.0 haven't been updated in years",
    "es5-ext": "Packages after 0.10.54 and at the moment up until 0.10.59 contain a protest message. A policy prevents us from using packages with protestware, therefore downgrading to the latest release without the message.",
    "eslint-plugin-react-hooks": "Aligns linting with React 19 behaviour while upstream stabilizes the release",
    "micromatch": "Version 3.x.x depends on decode-uri-component 0.2.0, which has a DoS vulnerability",
    "readable-stream": "Eliminates dependency on outdated string_decoder component",
    "shell-quote": "Versions prior to 1.7.3 have an RCE vulnerability. Should be removable once we upgrade CLI tools to ^8.0.0 with RN 0.69.",
    "tough-cookie": "@definitelytyped/dtslint indirectly depends on this through an out-of-date library, and our particular use case doesn't need cookies"
  }
}