
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
nativescript-dev-android-snapshot
Advanced tools
To start using the package execute: ```shell tns install android-snapshot ```
To start using the package execute:
tns install android-snapshot
This will install the nativescript-dev-android-snapshot package and save it as a dev dependency.
The plugin's hooks will be activated by default only in release configuration.
Optionally, this behavior can also be controlled by the TNS_ANDROID_SNAPSHOT environment variable:
0 to temporarily disable snapshots in release configuration.1 to enable snapshots in even debug configuration.When the android-snapshot plugin is activated, it will check whether the application is using Angular or not. Depending on that it will install either the tns-core-modules-snapshot package or the nativescript-angular-snapshot package (which includes the tns-core-modules + @angular). The specific version of this package will be determined by the original package version and the V8 version used in the currently installed Android Runtime.
Example: If you have
tns-core-modules@2.0.1andtns-android@2.1installed (which comes with V8 4.7.80), theandroid-snapshotplugin will search for and download thetns-core-modules-snapshot@2.0.1-4.7.80package (if not already manually installed).
Each of these packages has the following structure:
<package_name>-snapshot
├── _embedded_script_.js
├── bundle.records.json
└── snapshots
├── arm64-v8a
│ └── snapshot.blob
├── armeabi-v7a
│ └── snapshot.blob
└── x86
└── snapshot.blob
The _embedded_script_.js contains all the contents of the original plugin (and its dependencies) bundled with webpack. This file is required for the Android static binding generator tool. It is thus excluded from the final application package.
Each of the snapshot.blob files contains this exact script precompiled in binary form for the respective architecture. Modifications of the original package (and its dependencies) or of the _embedded_script_.js will have no effect because the new contents will mismatch that already included in the snapshot.blob files.
During platform preparation the android-snapshot plugin will delete all JavaScript files that are in the snapshot package (specified in the bundle.records.json file) and will instrument the Android Runtime to load the correct snapshot.blob file during startup. This will allow all further require(module) calls to be resolved from the modules cache contained within the snapshot binary.
To remove the android-snapshot package execute:
npm uninstall nativescript-dev-android-snapshot --save-dev
This will also remove any tns-core-modules-snapshot/nativescript-angular-snapshot packages that may be installed and delete all leftover files from the platform's assets.
After plugin removal or between configuration changes it is possible that the CLI will fail to prepare some plugins. This can be resolved by removing and then adding the android platform.
For more information or reporting issues follow this repository: https://github.com/NativeScript/android-snapshot
FAQs
The plugin is now deprecated. Please use webpack's `NativeScriptSnapshotPlugin` instead. For more information, check out the [documentation article](http://docs.nativescript.org/best-practices/bundling-with-webpack#v8-heap-snapshot).
We found that nativescript-dev-android-snapshot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.