
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
@exodus/jsc-android
Advanced tools
Pre-build version of JavaScriptCore to be used by React Native apps
The aim of this project is to provide maintainable build scripts for the JavaScriptCore JavaScript engine and allow the React Native project to incorporate up-to-date releases of JSC into the framework on Android.
This project is based on facebook/android-jsc but instead of rewriting JSC's build scripts into BUCK files, it relies on CMake build scripts maintained in a GTK branch of WebKit maintained by the WebKitGTK team (great work btw!). Thanks to that, with just a small amount of work we should be able to build not only current but also future releases of JSC. An obvious benefit for everyone using React Native is that this will allow us to update JSC for React Native on Android much more often than before (note that facebook/android-jsc uses JSC version from Nov 2014), which is especially helpful since React Native on iOS uses the built-in copy of JSC that is updated with each major iOS release (see this as a reference).
brew install coreutilsbrew install nodebrew tap caskroom/versions && brew cask install java8brew cask install android-sdk
sdkmanager --list and install all platforms, tools, buildtool v28.0.3, cmake (android images are not needed)$ANDROID_HOME to the correct path (in ~/.bashrc or similar)export PATH=$PATH:$ANDROID_HOME/platform-tools:$ANDROID_HOME/tools/binexport ANDROID_NDK=/path/to/android-ndk-r19cnpm run clean will clean everything (artifacts, downloaded sources)package.json to the desired build configurationprintVersion patch in jsc.patch)npm run download: downloads all needed sourcesnpm run start: builds jsc (this might take some time...)The zipfile containing the android-jsc AAR will be available at /dist.
The library is packaged as a local Maven repository containing AAR files that include the binaries.
JSC library built using this project is distributed over npm: npm/jsc-android. The library is packaged as a local Maven repository containing AAR files that include the binaries. Please refer to the section below in order to learn how your app can consume this format.
On load, JSC prints the version out to logcat, under "JavaScriptCore.Version" tag.
Follow steps below in order for your React Native app to use new version of JSC VM on android:
jsc-android:yarn add jsc-android
# Or if you would like to try latest version
# yarn add 'jsc-android@next'
jsc-android:yarn add jsc-android
# Or if you would like to try latest version
# yarn add 'jsc-android@next'
android/build.gradle file to add the new local maven repository packaged in the jsc-android package to the search path:allprojects {
repositories {
mavenLocal()
jcenter()
maven {
// All of React Native (JS, Obj-C sources, Android binaries) is installed from npm
url "$rootDir/../node_modules/react-native/android"
}
+ maven {
+ // Local Maven repo containing AARs with JSC library built for Android
+ url "$rootDir/../node_modules/jsc-android/dist"
+ }
}
}
build.gradle file located in android/app/build.gradle to add the JSC dependency. Please make sure the dependency is before the React Native dependency.
dependencies {
+ // Make sure to put android-jsc at the top
+ implementation "org.webkit:android-jsc:+"
+
compile fileTree(dir: "libs", include: ["*.jar"])
implementation "com.android.support:appcompat-v7:${rootProject.ext.supportLibVersion}"
implementation "com.facebook.react:react-native:+" // From node_modules
}
build.gradle file located in android/app/build.gradle to use first matched JSC library.android {
// ...
+ packagingOptions {
+ pickFirst '**/libjsc.so'
+ pickFirst '**/libc++_shared.so'
+ }
}
jsc-android:yarn add jsc-android
# Or if you would like to try latest version
# yarn add 'jsc-android@next'
android/build.gradle file to add new local maven repository packaged in the jsc-android package to the search path:allprojects {
repositories {
mavenLocal()
jcenter()
maven {
// All of React Native (JS, Obj-C sources, Android binaries) is installed from npm
url "$rootDir/../node_modules/react-native/android"
}
+ maven {
+ // Local Maven repo containing AARs with JSC library built for Android
+ url "$rootDir/../node_modules/jsc-android/dist"
+ }
}
}
build.gradle file located in android/app/build.gradle to force app builds to use new version of the JSC library as opposed to the version specified in react-native gradle module as a dependency:}
+configurations.all {
+ resolutionStrategy {
+ force 'org.webkit:android-jsc:+'
+ }
+}
dependencies {
compile fileTree(dir: "libs", include: ["*.jar"])
+ // ...
+ implementation 'org.webkit:android-jsc-cppruntime:+'
+ // For even older gradle
+ // compile 'org.webkit:android-jsc-cppruntime:+'
International variant includes ICU i18n library and necessary data allowing to use e.g. Date.toLocaleString and String.localeCompare that give correct results when using with locales other than en-US. Note that this variant is about 6MiB larger per architecture than default.
To use this variant instead replace the third installation step with:
For React Native version 0.60 and newer, your build.gradle should have a flag to enable this feature.
/**
* Use the international variant of JavaScriptCore
* This variant includes the ICU i18n library to make APIs like `Date.toLocaleString`
* and `String.localeCompare` work when using with locales other than en-US.
* Note that this variant is about 6MiB larger per architecture than the default.
*/
- def useIntlJsc = false
+ def useIntlJsc = true
For React Native version 0.59, replace original artifact id with android-jsc-intl
dependencies {
+ // Make sure to put android-jsc at the the first
+ implementation "org.webkit:android-jsc-intl:+"
+
compile fileTree(dir: "libs", include: ["*.jar"])
implementation "com.android.support:appcompat-v7:${rootProject.ext.supportLibVersion}"
implementation "com.facebook.react:react-native:+" // From node_modules
}
For React Native version 0.58 below, replace original resolutionStrategy with this.
+configurations.all {
+ resolutionStrategy {
+ eachDependency { DependencyResolveDetails details ->
+ if (details.requested.name == 'android-jsc') {
+ details.useTarget group: details.requested.group, name: 'android-jsc-intl', version: 'r241213'
+ }
+ }
+ }
+}
See Measurements page that contains synthetic perf test results for the most notable versions of JSC we have tried.
Compile errors of the sort:
More than one file was found with OS independent path 'lib/armeabi-v7a/libgnustl_shared.so'
Add the following to your app/build.gradle, under android:
packagingOptions {
pickFirst '**/libgnustl_shared.so'
}
Check the list of contributors here. This project is supported by:
FAQs
Pre-build version of JavaScriptCore to be used by React Native apps
We found that @exodus/jsc-android demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 91 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.