
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@convex-dev/expo-push-notifications
Advanced tools
A Convex component for managing push notifications with Expo.
This is a Convex component that integrates with Expo's push notification API to allow sending mobile push notifications to users of your app. It will batch calls to Expo's API and handle retrying delivery.

// App.tsx
<Button
onPress={() => {
void convex.mutation(api.example.sendPushNotification, {
to: otherUser,
title: `Hi from ${currentUser.name}`,
});
}}
>
<Text>Say hi!</Text>
</Button>
// convex/example.ts
export const sendPushNotification = mutation({
args: { title: v.string(), to: v.id("users") },
handler: async (ctx, args) => {
// Sending a notification
return pushNotifications.sendPushNotification(ctx, {
userId: args.to,
notification: {
title: args.title,
},
});
},
});
You'll need an existing Convex project to use the component. Convex is a hosted backend platform, including a database, serverless functions, and a ton more you can learn about here.
Run npm create convex or follow any of the
quickstarts to set one up.
Install the component package:
npm i @convex-dev/expo-push-notifications
Create a convex.config.ts file in your app's convex/ folder and install the
component by calling use:
// convex/convex.config.ts
import { defineApp } from "convex/server";
import pushNotifications from "@convex-dev/expo-push-notifications/convex.config.js";
const app = defineApp();
app.use(pushNotifications);
// other components
export default app;
Instantiate the PushNotifications client in your Convex functions:
// convex/example.ts
import { PushNotifications } from "@convex-dev/expo-push-notifications";
const pushNotifications = new PushNotifications(components.pushNotifications);
It takes in an optional type parameter (defaulting to Id<"users">) for the
type to use as a unique identifier for push notification recipients:
import { PushNotifications } from "@convex-dev/expo-push-notifications";
export type Email = string & { __isEmail: true };
const pushNotifications = new PushNotifications<Email>(
components.pushNotifications,
);
Get a user's push notification token following the Expo documentation here, and record it using a Convex mutation:
// convex/example.ts
export const recordPushNotificationToken = mutation({
args: { token: v.string() },
handler: async (ctx, args) => {
const userId = await getAuthUserId(ctx);
await pushNotifications.recordToken(ctx, {
userId,
pushToken: args.token,
});
},
});
You can pause and resume push notification sending for a user using the
pausePushNotifications and resumePushNotifications methods.
To determine if a user has a token and their pause status, you can use
getStatusForUser.
// convex/example.ts
export const sendPushNotification = mutation({
args: { title: v.string(), to: v.string() },
handler: async (ctx, args) => {
const pushId = await pushNotifications.sendPushNotification(ctx, {
userId: args.to,
notification: {
title: args.title,
},
});
},
});
You can use the ID returned from sendPushNotifications to query the status of
the notification using getNotification. Using this in a query allows you to
subscribe to the status of a notification.
You can also view all notifications for a user with getNotificationsForUser.
To add more logging, provide PushNotifications with a logLevel in the
constructor:
const pushNotifications = new PushNotifications(components.pushNotifications, {
logLevel: "DEBUG",
});
The push notification sender can be shutdown gracefully, and then restarted
using the shutdown and restart methods.
FAQs
A Convex component for managing push notifications with Expo.
The npm package @convex-dev/expo-push-notifications receives a total of 1,089 weekly downloads. As such, @convex-dev/expo-push-notifications popularity was classified as popular.
We found that @convex-dev/expo-push-notifications demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.