
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@capgo/capacitor-age-range
Advanced tools
Cross-platform age range detection. Google Play Age Signals on Android, Apple DeclaredAgeRange on iOS.
Cross-platform age range detection for Capacitor apps. Uses Google Play Age Signals on Android and Apple DeclaredAgeRange on iOS.
A unified, free, and lightweight age range plugin:
The most complete doc is available here: https://capgo.app/docs/plugins/age-range/
| Plugin version | Capacitor compatibility | Maintained |
|---|---|---|
| v8.*.* | v8.*.* | ✅ |
| v7.*.* | v7.*.* | On demand |
| v6.*.* | v6.*.* | ❌ |
| v5.*.* | v5.*.* | ❌ |
Note: The major version of this plugin follows the major version of Capacitor. Use the version that matches your Capacitor installation (e.g., plugin v8 for Capacitor 8). Only the latest major version is actively maintained.
You can use our AI-Assisted Setup to install the plugin. Add the Capgo skills to your AI tool using the following command:
npx skills add https://github.com/cap-go/capacitor-skills --skill capacitor-plugins
Then use the following prompt:
Use the `capacitor-plugins` skill from `cap-go/capacitor-skills` to install the `@capgo/capacitor-age-range` plugin in my project.
If you prefer Manual Setup, install the plugin by running the following commands and follow the platform-specific instructions below:
npm install @capgo/capacitor-age-range
npx cap sync
NOT_AVAILABLE on older versions)requestAgeRange() needs this capability signed into the iOS app. Edit two files, then enable it on the App ID.
ios/App/App/App.entitlementsPaste these two lines inside the existing <dict> (keep keys you already have, such as aps-environment):
<key>com.apple.developer.declared-age-range</key>
<true/>
If that file does not exist, create ios/App/App/App.entitlements with this exact content:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.developer.declared-age-range</key>
<true/>
</dict>
</plist>
ios/App/App.xcodeproj/project.pbxprojThe entitlements file is ignored until this line is on the App target for both Debug and Release. Search the file for the two App-target buildSettings blocks that contain PRODUCT_BUNDLE_IDENTIFIER (not the project-level configs) and add:
CODE_SIGN_ENTITLEMENTS = App/App.entitlements;
It should sit next to the other signing keys, for example:
CODE_SIGN_ENTITLEMENTS = App/App.entitlements;
CODE_SIGN_STYLE = Automatic;
Xcode UI does the same two files: Target → Signing & Capabilities → + Capability → Declared Age Range.
Without steps 1–3, in-app requestAgeRange() fails. This entitlement does not control App Store download of 18+ apps in Australia, Brazil, and Singapore — Apple performs that adult confirmation automatically from the listing age rating.
Verify before shipping:
npx @capgo/cli@latest build prescan
The check id is ios/entitlements-declared-age-range.
On iOS, requestAgeRange() presents a system dialog where the user (or their guardian via Family Sharing) declares their age range. The ageGates option controls the age boundaries shown in the dialog (default: [13, 16, 18]).
On Android, the plugin queries Google Play Age Signals API in the background — no user prompt is shown. The Play Store determines the user's age verification status from their Google account.
No additional permissions or manifest changes are needed.
Not supported. The web implementation throws 'AgeRange does not have web implementation'.
Cross-platform age range detection plugin.
Uses Google Play Age Signals on Android and Apple DeclaredAgeRange on iOS.
requestAgeRange(options?: RequestAgeRangeOptions | undefined) => Promise<AgeRangeResult>
Request the user's age range.
On Android: queries Google Play Age Signals API (no user prompt). On iOS: presents the system DeclaredAgeRange dialog (requires iOS 26.2+).
| Param | Type | Description |
|---|---|---|
options | RequestAgeRangeOptions | - Configuration for the age range request |
Returns: Promise<AgeRangeResult>
Since: 8.0.0
getPluginVersion() => Promise<{ version: string; }>
Get the native Capacitor plugin version.
Returns: Promise<{ version: string; }>
Since: 8.0.0
Result of the age range request.
| Prop | Type | Description | Since |
|---|---|---|---|
status | AgeRangeStatus | The outcome status of the age range request. | 8.0.0 |
ageLower | number | Inclusive lower bound of the user's age range. Present when age data is available. | 8.0.0 |
ageUpper | number | Inclusive upper bound of the user's age range. May be absent if the user is in the highest age bracket (e.g. 18+). | 8.0.0 |
declarationSource | DeclarationSource | How the age was declared/determined. On iOS: 'SELF_DECLARED' or 'GUARDIAN_DECLARED'. On Android: 'SUPERVISED' (guardian-managed) or 'VERIFIED' (Google-verified 18+). | 8.0.0 |
androidUserStatus | AndroidUserStatus | Android-only. The user's Google Play verification status. | 8.0.0 |
mostRecentApprovalDate | string | Android-only. Effective date for the most recent guardian-approved change. | 8.0.0 |
installId | string | Android-only. Install identifier for supervised installs in Google Play. | 8.0.0 |
Options for the age range request.
| Prop | Type | Description | Default | Since |
|---|---|---|---|---|
ageGates | number[] | Age thresholds for the request. On iOS: these are passed to requestAgeRange(ageGates:) as the age boundaries presented in the system dialog. Common values: [13, 16, 18]. On Android: this parameter is ignored (Play Age Signals returns predefined ranges: 0-12, 13-15, 16-17, 18+). | [13, 16, 18] | 8.0.0 |
Top-level status of the age range request.
'SHARING' | 'DECLINED_SHARING' | 'NOT_AVAILABLE' | 'ERROR'
How the age range was declared or determined.
'SELF_DECLARED' | 'GUARDIAN_DECLARED' | 'VERIFIED' | 'UNKNOWN'
Android-specific Google Play user status values.
'VERIFIED' | 'SUPERVISED' | 'SUPERVISED_APPROVAL_PENDING' | 'SUPERVISED_APPROVAL_DENIED' | 'UNKNOWN' | 'EMPTY'
import { AgeRange } from '@capgo/capacitor-age-range';
// Request age range with default gates (13, 16, 18)
const result = await AgeRange.requestAgeRange();
switch (result.status) {
case 'SHARING':
console.log('Age range:', result.ageLower, '-', result.ageUpper);
console.log('Source:', result.declarationSource);
break;
case 'DECLINED_SHARING':
console.log('User declined to share age');
break;
case 'NOT_AVAILABLE':
console.log('Age range API not available');
break;
case 'ERROR':
console.log('Error occurred');
break;
}
// Custom age gates (iOS only)
const result2 = await AgeRange.requestAgeRange({ ageGates: [13, 18] });
| Android UserStatus | → status | → declarationSource |
|---|---|---|
| VERIFIED | SHARING | VERIFIED |
| SUPERVISED | SHARING | GUARDIAN_DECLARED |
| SUPERVISED_APPROVAL_PENDING | SHARING | GUARDIAN_DECLARED |
| SUPERVISED_APPROVAL_DENIED | SHARING | GUARDIAN_DECLARED |
| UNKNOWN / EMPTY | DECLINED_SHARING | — |
| iOS Response | → status | → declarationSource |
|---|---|---|
| .sharing (selfDeclared) | SHARING | SELF_DECLARED |
| .sharing (guardianDeclared) | SHARING | GUARDIAN_DECLARED |
| .declinedSharing | DECLINED_SHARING | — |
FAQs
Cross-platform age range detection. Google Play Age Signals on Android, Apple DeclaredAgeRange on iOS.
The npm package @capgo/capacitor-age-range receives a total of 11,577 weekly downloads. As such, @capgo/capacitor-age-range popularity was classified as popular.
We found that @capgo/capacitor-age-range demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.