@capacitor/app

The App API handles high level App state and events.For example, this API emits events when the app enters and leaves the foreground, handles deeplinks, opens other apps, and manages persisted plugin state.

Latest 8.1.2

NPM

68%

Total Score

caution

Usable with caveats: active project health is offset by high-confidence publishing-workflow issues and weak action pinning.

Health Score Breakdown

Workflow audit

Seven high-confidence template-injection findings affect npm publishing workflows, and 50 of 52 action references are unpinned; these are meaningful workflow-integrity and maintenance risks. The audit analyzed all 14 workflows and found no untrusted checkout or script-injection trigger pairing, which limits the severity.

Maintainers

The package has 20 registry publishers, with 11 using the primary outsystems.com domain, consistent with organization-backed publishing. The listed consumer-domain accounts jcesarmobile, chuckytuh, trevorlambert, and alexgerardojacinto, plus outside-domain accounts ionicjs, jpender, mark-ionic, markemer, and eric-ionic, add account-hygiene caution but do not indicate limited maintenance capacity.

Repo tooling

The repository uses Nx, npm scripts, and TypeScript build tooling. No security-scanning tools were detected, leaving a modest process gap despite the established build setup.